CVE-2026-73463

Name of the Vulnerable Software and Affected Versions Arista EOS (affected versions not specified)

Description A race condition in the gNSI Authz service occurs on platforms running Arista EOS when multiple gRPC Network Security Interface (gNSI) transports are configured. This condition may cause a policy rotation to fail silently, allowing an authenticated user whose access was revoked by the new policy to maintain unauthorized access to gRPC interfaces. This issue does not affect Bootz.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.