CVE-2026-73447

CVE-2026-73447 is an OS command injection flaw (CWE-78) in the gRPC Network Security Interface (gNSI) Certz service on Arista EOS-based products. An authenticated attacker who already holds high privileges can send a crafted Certz Rotate request, causing arbitrary operating system commands to run with root privileges; the Bootz service is also affected. Successful exploitation grants full control of the device, including its configuration, traffic, and availability. All operators running Arista EOS-based products with the gNSI Certz or Bootz services enabled are in scope. As of this analysis there is no CISA KEV listing, no public proof-of-concept, and no known exploitation.

What to do: Track Arista's PSIRT advisory (CVE assigned by [email protected]) and upgrade EOS to the fixed release it specifies once published. In the interim, restrict access to gNSI/gRPC management services (Certz and Bootz) to trusted management networks via management-plane ACLs, and audit which accounts hold the privileged access required to invoke Certz Rotate. Monitor logs for unexpected or anomalous Certz Rotate and Bootz requests.