{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-73457", "assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "state": "PUBLISHED", "assignerShortName": "Arista", "dateReserved": "2026-08-12T16:45:03.510Z", "datePublished": "2026-09-16T18:57:50.711Z", "dateUpdated": "2026-09-16T18:57:50.711Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "shortName": "Arista", "dateUpdated": "2026-09-16T18:57:50.711Z"}, "title": "Under certain circumstances, the gNPSI client credentials might be logged in clear text, in local or remote accounting logs to authenticated users.", "datePublic": "2026-09-09T18:55:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-532", "description": "CWE-532 Insertion of Sensitive Information into Log File", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-118", "descriptions": [{"lang": "en", "value": "CAPEC-118 Information Disclosure"}]}], "affected": [{"vendor": "Arista Networks", "product": "EOS", "platforms": ["710 Series", "720D Series", "720XP/722XPM Series", "750X Series", "7010TX Series", "7020R/R4 Series", "7130 Series running EOS", "7170 Series", "7050X3/X4 Series", "7060X/X2/X4/X5/X6 Series", "7260X/X3 Series", "7280R/R2/R3/R4 Series", "7300X/X3 Series", "7320X Series", "7358X4 Series", "7368X4 Series", "7388X5 Series", "7500R/R2/R3 Series", "7800R3/R4 Series", "7700R4 Series", "AWE 5000 Series", "AWE 7200R Series", "CloudEOS", "cEOS-lab", "vEOS-lab", "CloudVision eXchange", "virtual or physical appliance"], "versions": [{"status": "affected", "version": "4.36.0", "lessThanOrEqual": "4.36.1F", "changes": [{"at": "4.36.2F", "status": "unaffected"}], "versionType": "custom"}, {"status": "affected", "version": "4.35.0", "lessThanOrEqual": "4.35.5M", "changes": [{"at": "4.35.6M", "status": "unaffected"}], "versionType": "custom"}, {"status": "affected", "version": "4.34.2F", "lessThanOrEqual": "4.34.7M", "changes": [{"at": "4.34.8M", "status": "unaffected"}], "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, the gNPSI client credentials might be logged in clear text in local or remote accounting logs to authenticated users.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, the gNPSI client credentials might be logged in clear text in local or remote accounting logs to authenticated users.</p>"}]}], "references": [{"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24714-security-advisory-0158", "tags": ["vendor-advisory"]}], "configurations": [{"lang": "en", "value": "In order to be vulnerable to CVE-2026-73457, gNPSI must be configured with trace facility EosRpcAuth enabled explicitly:\n\n\n\nswitch> show trace Gnpsi | grep Auth\nEosRpcAuth enabled 0123456789.\n\n\n\nSystems remain unaffected if gNPSI is not enabled (default configuration):\n\n\n\nswitch> show management api gnpsi\nEnabled: no transports enabled", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>In order to be vulnerable to CVE-2026-73457, gNPSI must be configured with trace facility EosRpcAuth enabled explicitly:</p><pre>switch&gt; show trace Gnpsi | grep Auth\nEosRpcAuth enabled 0123456789.</pre><p>Systems remain unaffected if gNPSI is not enabled (default configuration):</p><pre>switch&gt; show management api gnpsi\nEnabled: no transports enabled</pre>"}]}], "workarounds": [{"lang": "en", "value": "To secure the agent against\u00a0 CVE-2026-73457, the service must be configured to use mutual TLS and only x509-spiffe authentication must be enabled.\n\n\n\nmanagement security\n\u00a0\u00a0\u00a0ssl profile P1\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0certificate server.crt key server.key\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0trust certificate ca_client.crt\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0chain certificate ca_signing.crt\n!\nmanagement api gnpsi\n\u00a0\u00a0\u00a0transport grpc t2\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0ssl profile P1\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0port 7001\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0authentication username priority x509-spiffe\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0no disabled\n\n\n\u00a0\n\n\n\nLogs are disabled by default, including the affected facility EosRpcAuth.To mitigate CVE-2026-73457, ensure the facility EosRpcAuth status is set to disabled. The command below can be used to restore all Gnpsi agent tracing to its default setting.\n\n\n\nswitch(config)# no trace Gnpsi setting\n\n\n\u00a0\n\n\n\nShould it be determined that sensitive information has been logged, the affected log files must be truncated and any compromised secrets rotated to prevent gNPSI client credentials leaking.\n\n\n\nUse the following commands to clean up Gnpsi log files:\n\n\n\nswitch(config)# bash sudo truncate -s 0 /var/log/agents/Gnpsi*\n\n\n\u00a0\n\n\n\nThen use the following commands to clean up previously rotated old log files:\n\n\n\nswitch(config)# bash sudo find /var/log/agents -name 'Gnpsi*.gz' -type f -delete", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>To secure the agent against&nbsp; CVE-2026-73457, the service must be configured to use <i>mutual TLS</i> and only<i> x509-spiffe </i>authentication must be enabled.</p><pre>management security\n&nbsp;&nbsp;&nbsp;ssl profile P1\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;certificate server.crt key server.key\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;trust certificate ca_client.crt\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;chain certificate ca_signing.crt\n!\nmanagement api gnpsi\n&nbsp;&nbsp;&nbsp;transport grpc t2\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;ssl profile P1\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;port 7001\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;authentication username priority x509-spiffe\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;no disabled\n</pre><div>&nbsp;</div><p>Logs are disabled by default, including the affected facility <b>EosRpcAuth</b>.To mitigate CVE-2026-73457, ensure the facility <b>EosRpcAuth</b> status is set to disabled. The command below can be used to restore all Gnpsi agent tracing to its default setting.</p><pre>switch(config)# no trace Gnpsi setting\n</pre><div>&nbsp;</div><p>Should it be determined that sensitive information has been logged, the affected log files must be truncated and any compromised secrets rotated to prevent gNPSI client credentials leaking.</p><p>Use the following commands to clean up Gnpsi log files:</p><pre>switch(config)# bash sudo truncate -s 0 /var/log/agents/Gnpsi*\n</pre><div>&nbsp;</div><p>Then use the following commands to clean up previously rotated old log files:</p><pre>switch(config)# bash sudo find /var/log/agents -name 'Gnpsi*.gz' -type f -delete</pre>"}]}], "solutions": [{"lang": "en", "value": "The recommended resolution is to upgrade to a remediated software version at your earliest convenience. CVE-2026-73457 has been fixed in the following releases:\n\n * 4.36.2F and later releases in the 4.36.x train\n * 4.35.6M and later releases in the 4.35.x train\n * 4.34.8M and later releases in the 4.34.x train", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>The recommended resolution is to upgrade to a remediated software version at your earliest convenience. CVE-2026-73457 has been fixed in the following releases:</p><ul><li>4.36.2F and later releases in the 4.36.x train</li><li>4.35.6M and later releases in the 4.35.x train</li><li>4.34.8M and later releases in the 4.34.x train</li></ul>"}]}], "credits": [{"lang": "en", "value": "This issue was discovered internally by Arista.", "type": "finder"}], "source": {"defect": ["1824885"], "advisory": "158", "discovery": "INTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.5"}, "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"}}, {"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 6, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"}}]}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["710 Series", "720D Series", "720XP/722XPM Series", "750X Series", "7010TX Series", "7020R/R4 Series", "7130 Series running EOS", "7170 Series", "7050X3/X4 Series", "7060X/X2/X4/X5/X6 Series", "7260X/X3 Series", "7280R/R2/R3/R4 Series", "7300X/X3 Series", "7320X Series", "7358X4 Series", "7368X4 Series", "7388X5 Series", "7500R/R2/R3 Series", "7800R3/R4 Series", "7700R4 Series", "AWE 5000 Series", "AWE 7200R Series", "CloudEOS", "cEOS-lab", "vEOS-lab", "CloudVision eXchange", "virtual or physical appliance"], "product": "EOS", "vendor": "Arista Networks", "versions": [{"changes": [{"at": "4.36.2F", "status": "unaffected"}], "lessThanOrEqual": "4.36.1F", "status": "affected", "version": "4.36.0", "versionType": "custom"}, {"changes": [{"at": "4.35.6M", "status": "unaffected"}], "lessThanOrEqual": "4.35.5M", "status": "affected", "version": "4.35.0", "versionType": "custom"}, {"changes": [{"at": "4.34.8M", "status": "unaffected"}], "lessThanOrEqual": "4.34.7M", "status": "affected", "version": "4.34.2F", "versionType": "custom"}]}], "source": "psirt@arista.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, the gNPSI client credentials might be logged in clear text in local or remote accounting logs to authenticated users."}], "id": "CVE-2026-73457", "lastModified": "2026-09-16T20:36:36.960", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 3.6, "source": "psirt@arista.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 6.0, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "psirt@arista.com", "type": "Secondary"}]}, "published": "2026-09-16T19:17:32.453", "references": [{"source": "psirt@arista.com", "url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24714-security-advisory-0158"}], "sourceIdentifier": "psirt@arista.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-532"}], "source": "psirt@arista.com", "type": "Secondary"}]}

{}

{}