CVE-2026-101150: CWE-918 Server-Side Request Forgery (SSRF) in Arista Networks CloudVision Portal

This vulnerability (CVE-2026-101150) in Arista Networks CloudVision Portal involves insufficient validation of OpenID Connect (OIDC) bearer token configuration. A user possessing specific high privileges can exploit this flaw to perform server-side request forgery (SSRF), enabling them to direct requests from the server to arbitrary destinations. The vulnerability is present in versions >=2023.3.0 <2025.3.0, >=2025.3.0 <=2025.3.3, >=2026.1.0 <=2026.1.2, and exactly =2026.2.0. The CVSS v3.1 base score is 4.1, reflecting a medium severity impact with network attack vector, low complexity, high privileges required, no user interaction, and partial confidentiality impact. No official patch or vendor advisory detailing remediation is provided in the input data.

An attacker with specific high privileges can exploit this SSRF vulnerability to cause the CloudVision Portal server to send requests to arbitrary destinations. This could potentially lead to unauthorized information disclosure limited to confidentiality impact, as indicated by the CVSS vector. There is no indication of integrity or availability impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Arista Networks advisories for updates. Restricting high privilege access to trusted users may reduce risk until a fix is available.