CVE-2026-73456: Under certain circumstances, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised switch.
Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised switch.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Arista EOSto a version that resolves this vulnerability.Fixed in 4.34.8M - Upgrade
Upgrade
Arista EOSto a version that resolves this vulnerability.Fixed in 4.35.6M - Upgrade
Upgrade
Arista EOSto a version that resolves this vulnerability.Fixed in 4.36.2F
Event History
Frequently Asked Questions
Which deployments should be prioritized for investigation?
Prioritize affected platforms running Arista EOS where the gRPC Network Packet Sampling Interface (gNPSI) is enabled. The issue is associated with requests from an unauthenticated gNPSI client.
Does exploitation require valid credentials or user interaction?
No. The supplied vector indicates no privileges and no user interaction are required.
What is the expected impact if exploitation succeeds?
Successful exploitation can allow arbitrary code execution and grant the attacker full administrative control of the compromised switch. The stated impact includes high confidentiality, integrity, and availability effects.