CVE-2026-73461

Summary

This flaw allows an authenticated user to use the wrong privilege level for gRPC requests to OpenConfig, potentially leading to unauthorized access. It matters because it can bypass intended authorization controls.

Exploitability

Exploitation requires an authenticated user with gRPC access to OpenConfig and AAA-based gRPC authorization enabled. The attacker must correctly authenticate but can misuse the privilege level.

Blast radius

If exploited, this could result in unauthorized access to OpenConfig resources, leading to data breaches or system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable gRPC authorization for OpenConfig or ensure that the correct privilege levels are assigned to gRPC requests.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.