CVE-2026-101152: CWE-601 URL Redirection to Untrusted Site ('Open Redirect') in Arista Networks CloudVision Portal

CVE-2026-101152 describes an open redirect vulnerability (CWE-601) in the Single Sign-On (SSO) login flow of Arista Networks CloudVision Portal. Due to insufficient validation of URLs during the SSO process, a remote unauthenticated attacker can craft a URL that redirects authentication material from the identity provider (IdP) to an attacker-controlled URL instead of the legitimate CloudVision Portal. This flaw affects versions >=2021.1.0 <2025.3.0, >=2025.3.0 <=2025.3.3, >=2026.1.0 <=2026.1.2, and =2026.2.0. The vulnerability has a CVSS v3.1 score of 8.0, indicating high severity with network attack vector, high complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality and integrity.

Successful exploitation allows an attacker to redirect authentication tokens or credentials to a malicious site, potentially leading to credential theft or unauthorized access. The vulnerability compromises confidentiality and integrity of authentication material but does not impact availability. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when clicking on SSO login URLs and verify the legitimacy of URLs before authentication. Monitor vendor communications for patches or updates addressing this vulnerability.