Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2026-73457

Under certain circumstances, the gNPSI client credentials might be logged in clear text, in local or remote accounting logs to authenticated users.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Arista

Description

Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, the gNPSI client credentials might be logged in clear text in local or remote accounting logs to authenticated users.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Arista Networks EOS

Default version status: unaffected

  • 4.36.0 to ≤ 4.36.1Faffected
  • 4.35.0 to ≤ 4.35.5Maffected
  • 4.34.2F to ≤ 4.34.7Maffected

References