CVE-2026-73439: CWE-842 Placement of User into Incorrect Group in Arista Networks EOS
On affected platforms running Arista EOS, if OpenConfig is configured and running a gNMI server on the system, and if gNSI Pathz is configured and a gNSI Pathz policy is present on the system, then gNMI may fail to correctly enforce the rules in this policy if both a group rule and a user rule for the same path is present in the policy. Under certain conditions, this can lead to an authenticated user gaining unauthorized permission to read or write gNMI paths that the Pathz policy is intended to restrict.
AI Analysis
Technical Summary
On affected Arista EOS platforms, when OpenConfig is configured with a gNMI server and a gNSI Pathz policy containing both group and user rules for the same path, the gNMI server may fail to correctly enforce the policy rules. This failure can allow an authenticated user to gain unauthorized permissions to read or write gNMI paths that the policy intends to restrict. The issue is classified under CWE-842 (Placement of User into Incorrect Group). The vulnerability affects multiple EOS versions from 4.33.2F to 4.36.0.1F as specified. The CVSS 3.1 score is 7.5 with high impact on confidentiality, integrity, and availability.
Potential Impact
An authenticated user on the affected system may gain unauthorized read or write access to gNMI paths that should be restricted by the gNSI Pathz policy. This can lead to unauthorized disclosure, modification, or disruption of configuration or operational data accessible via gNMI, impacting confidentiality, integrity, and availability of the system.
Mitigation Recommendations
Patch status is not yet confirmed as no explicit vendor advisory or patch links are provided. Users should consult Arista Networks' official advisories for updates and apply any available patches or fixes. Until a fix is applied, carefully review and audit gNSI Pathz policies to avoid configurations where both group and user rules exist for the same path. Restrict access to authenticated users and monitor for unusual gNMI activity.
CVE-2026-73439: CWE-842 Placement of User into Incorrect Group in Arista Networks EOS
Description
On affected platforms running Arista EOS, if OpenConfig is configured and running a gNMI server on the system, and if gNSI Pathz is configured and a gNSI Pathz policy is present on the system, then gNMI may fail to correctly enforce the rules in this policy if both a group rule and a user rule for the same path is present in the policy. Under certain conditions, this can lead to an authenticated user gaining unauthorized permission to read or write gNMI paths that the Pathz policy is intended to restrict.
CVSS v3.1
Score 7.5high
Affected software
Arista Networks
EOS
pkg:rpm/arista/eosRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
On affected Arista EOS platforms, when OpenConfig is configured with a gNMI server and a gNSI Pathz policy containing both group and user rules for the same path, the gNMI server may fail to correctly enforce the policy rules. This failure can allow an authenticated user to gain unauthorized permissions to read or write gNMI paths that the policy intends to restrict. The issue is classified under CWE-842 (Placement of User into Incorrect Group). The vulnerability affects multiple EOS versions from 4.33.2F to 4.36.0.1F as specified. The CVSS 3.1 score is 7.5 with high impact on confidentiality, integrity, and availability.
Potential Impact
An authenticated user on the affected system may gain unauthorized read or write access to gNMI paths that should be restricted by the gNSI Pathz policy. This can lead to unauthorized disclosure, modification, or disruption of configuration or operational data accessible via gNMI, impacting confidentiality, integrity, and availability of the system.
Mitigation Recommendations
Patch status is not yet confirmed as no explicit vendor advisory or patch links are provided. Users should consult Arista Networks' official advisories for updates and apply any available patches or fixes. Until a fix is applied, carefully review and audit gNSI Pathz policies to avoid configurations where both group and user rules exist for the same path. Restrict access to authenticated users and monitor for unusual gNMI activity.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Arista
- Date Reserved
- 2026-08-12T16:39:35.977Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6aaa540255bf5e2cf53c614c
Added to database: 09/16/2026, 08:32:02 UTC
Last enriched: 09/16/2026, 08:46:42 UTC
Last updated: 09/16/2026, 22:11:11 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.