CVE-2026-73453

Name of the Vulnerable Software and Affected Versions Arista EOS (affected versions not specified)

Description An unauthenticated P4Runtime (Programming Protocol-Independent Packet Processors Runtime) client can achieve arbitrary code execution on platforms running Arista EOS when P4Runtime is configured. By crafting a malicious packet during the initiation of a P4Runtime session, an attacker can obtain complete administrative control over the compromised switch. P4Runtime is disabled by default in Arista EOS.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation, ensure that P4Runtime remains disabled if it is not required for operations.