Description
An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Network Provisioning Image Repository.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Arista Networks CloudVision Portal
Default version status: unaffected
2026.2.0affected2026.1.0 to ≤ 2026.1.2affected2025.3.0 to ≤ 2025.3.3affected2018.1.0 to < 2025.3.0affected