{"id":"CVE-2026-101153","published":"2026-10-06T20:17:09.400","lastModified":"2026-10-07T13:38:48.657","description":"On affected versions of CloudVision Portal (on-premises) or CloudVision Sensor, a path traversal vulnerability exists. An authenticated user with sufficient high privileges could exploit this to extract unintended data from the Sensor.","cvssScore":8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-22"],"vendors":[],"products":[],"references":[{"url":"https://www.arista.com/en/support/advisories-notices/security-advisory/24804-security-advisory-0188","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A path traversal vulnerability in CloudVision Portal/Sensor allows authenticated users with high privileges to access unintended files and data on the sensor system. This represents a significant data exposure risk as attackers can extract sensitive information from the affected systems.","exploitability":"Exploitation requires an authenticated user with sufficient privileges, but is moderately difficult due to the need for specific path traversal payloads and the requirement for high-privilege accounts.","blast_radius":"The vulnerability could lead to widespread data extraction across multiple sensor systems, potentially exposing sensitive operational data, configuration files, and system information that could aid further attacks.","remediation":"Upgrade to CloudVision Portal 2.590 or later to address this path traversal vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["path-traversal","data-exfiltration","sensor","privilege-escalation"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:59:44.766Z"}}