Skip to content
Arista NetworksCVE-2026-73447

Arista Networks EOS: code execution

Critical9.4CVE-2026-73447 · Published Sep 16, 2026 · updated Sep 17, 2026

A privileged attacker can exploit certain operation to execute arbitrary commands with root privileges, leading to full device compromise. An authenticated user can exploit gRPC Network Security Interface (gNSI) Certz service on Arista EOS-based products to escalate privileges and execute arbitrary OS commands via a crafted Certz Rotate request. The Bootz service is also affected.

Arista Networks advisory

Affected versions

PackageAffectedFixed in
EOS
Product
>= 4.30.2F, < 4.31.0F4.31.0F
>= 4.31.0F, < 4.32.0F4.32.0F
>= 4.32.0F, < 4.33.0F4.33.0F
>= 4.33.0F, <= 4.33.8MNo fix yet
Details and references
CVSS 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-78

More Arista Networks advisories

All Arista Networks
Advisory
Arista Networks EOS: remote code execution
Critical9.2Sep 16
Arista Networks EOS: secrets in logs
Medium6.0Sep 16
Arista Networks EOS: out-of-bounds read
High7.1Sep 16
Arista Networks EOS: secrets in logs
Low2.1Sep 16
Arista Networks EOS: denial of service
Medium5.3Sep 16
Arista Networks VeloCloud Edge: missing authentication
High8.7Sep 16

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.