CVE-2026-73464

Summary

This flaw allows a malicious authenticated client to execute arbitrary code with root privileges on the switch via a specially crafted request to the gRPC Network Management Interface (gNMI). This is a high-risk vulnerability due to the potential for complete system compromise.

Exploitability

Exploitation requires a valid gNMI client with authenticated access, making it moderately difficult. The attacker must have gNMI access to the switch.

Blast radius

If exploited, the attacker could gain full control over the switch, leading to potential network disruption and data loss.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the gRPC Network Management Interface (gNMI) feature on the affected platforms running Arista EOS.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.