{"id":"CVE-2026-73461","published":"2026-09-16T09:17:05.147","lastModified":"2026-09-17T04:18:00.483","description":"On affected EOS platforms with AAA-based gRPC authorization enabled for OpenConfig, gRPC requests of an authenticated user to OpenConfig may use the wrong privilege level, resulting in an authorization using the wrong AAA method list. This does not impact non-gRPC OpenConfig requests such as NETCONF.","cvssScore":8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-266"],"vendors":[],"products":[],"references":[{"url":"https://www.arista.com/en/support/advisories-notices/security-advisory/24719-security-advisory-0163","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This flaw allows an authenticated user to use the wrong privilege level for gRPC requests to OpenConfig, potentially leading to unauthorized access. It matters because it can bypass intended authorization controls.","exploitability":"Exploitation requires an authenticated user with gRPC access to OpenConfig and AAA-based gRPC authorization enabled. The attacker must correctly authenticate but can misuse the privilege level.","blast_radius":"If exploited, this could result in unauthorized access to OpenConfig resources, leading to data breaches or system compromise.","remediation":"Disable gRPC authorization for OpenConfig or ensure that the correct privilege levels are assigned to gRPC requests.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","grpc","openconfig","aaa"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-06T08:46:06.164Z"}}