CVE-2026-73464: Security Advisory 0166

Published Sep 16, 2026

Updated

On affected platforms running Arista EOS with gRPC Network Management Interface (gNMI) enabled, a specially crafted request could allow a malicious authenticated client with gRPC Network Management Interface (gNMI) access to execute arbitrary code with root privileges on the switch.

Affected Software

2 affected components

Arista EOS

gRPC Network Management Interface (gNMI)

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Arista EOS to a version that resolves this vulnerability.
Fixed in 4.33.9M
Upgrade
Upgrade Arista EOS to a version that resolves this vulnerability.
Fixed in 4.34.7.1M
Upgrade
Upgrade Arista EOS to a version that resolves this vulnerability.
Fixed in 4.35.6M
Upgrade
Upgrade Arista EOS to a version that resolves this vulnerability.
Fixed in 4.36.1F
Compensating control
For affected platforms with gRPC Network Management Interface (gNMI) enabled, restrict gNMI access to trusted, authenticated clients only (limit who can access the gNMI management interface) since a malicious authenticated gNMI client could execute arbitrary code with root privileges.

Event History

Sep 16, 2026

CVE Published

via MITRE·08:32 AM

Data Sourced

via MITRE·08:32 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·09:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments should be prioritized for review?

Affected platforms running Arista EOS with gNMI enabled should be prioritized, especially where clients have authenticated access to the gNMI service.

What level of access does an attacker need?

The attacker must be an authenticated client with access to gNMI. No user interaction is required.

What is the potential impact after exploitation?

A specially crafted gNMI request could allow arbitrary code execution with root privileges on the switch, affecting confidentiality, integrity, and availability.