CVE-2026-2380

Name of the Vulnerable Software and Affected Versions Arista EOS (affected versions not specified)

Description On platforms running Arista EOS with OpenConfig-related services, including gNMI, gNSI, RESTCONF, and NETCONF, sensitive requests and responses may be unintentionally logged. This information can be stored locally on the device or recorded on remote accounting servers. Examples of exposed data include sensitive CLI commands and OpenConfig YANG leafs, such as system/aaa/global/tacacs/config/secret-key. gRPC-based streaming via Streaming Telemetry Agent to CloudVision is not affected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.