CVE-2026-73454

Summary

This flaw allows a specially crafted request to modify an account's properties, potentially granting unauthorized elevated privileges. It matters because it can lead to unauthorized access and privilege escalation without proper mitigation.

Exploitability

Exploitation requires gRPC Network Security Interface (gNSI) Credentialz to be configured and a specially crafted request. The attack is moderately difficult to execute, especially if the affected feature is not enabled or properly secured.

Blast radius

If exploited, the impact could be significant, as it may lead to unauthorized access and privilege escalation, affecting the security and integrity of the system.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the gRPC Network Security Interface (gNSI) Credentialz feature or upgrade to the latest version of Arista EOS that addresses this vulnerability, specifically version 4.29.1 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.