Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2026-101150

Security Advisory 0186

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Arista

Description

Insufficient validation of OIDC bearer token configuration could allow a user with specific high privileges to direct requests to arbitrary destinations.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Arista Networks CloudVision Portal

Default version status: unaffected

  • 2026.2.0affected
  • 2026.1.0 to ≤ 2026.1.2affected
  • 2025.3.0 to ≤ 2025.3.3affected
  • 2023.3.0 to < 2025.3.0affected

References