CVE-2026-121289

Name of the Vulnerable Software and Affected Versions Arista EOS versions prior to 4.33.0F

Description On platforms running Arista EOS with BGP configured, a stack buffer overflow allows a remote attacker to crash the BGP agent by sending a specially crafted packet. This results in the termination of the BGP agent process, causing the loss of all BGP sessions on the device and disrupting network routing until the process recovers. A sophisticated attacker may also achieve arbitrary code execution, potentially compromising the confidentiality and integrity of the system.

Recommendations Update to version 4.33.0F.