CVE-2026-73456

Description

Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised switch.

CVSS Vector

References

• https://www.arista.com/en/support/advisories-notices/security-advisory/24714-security-advisory-0158