Vulnerabilities

TI-2025-04563 CVE-2025-5088 · GHSA-6vg3-4m6v-gqxx

Arista CloudVision Exchange (CVX) Cluster Privilege Escalation via MCS Redis Session

MEDIUM 40

An authenticated Redis session could be used to obtain full root access to all servers in the CVX cluster.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00323 Published 2026-06-05 Fixed in 4.31.0 CWE-269

TI-2025-04565 CVE-2025-5090 · GHSA-3hcx-j6wp-vh2q

LOW 31

CVX is not resilient to unexpected messages from a connected switch.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00235 Published 2026-06-05 Fixed in 4.32.0 CWE-20

TI-2025-04564 CVE-2025-5089 · GHSA-xmjq-j83c-q6g4

LOW 31

In a CVX cluster, an EOS switch connected to a CVX server is not resilient to certain malformed messages received from the connected CVX server.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00235 Published 2026-06-05 Fixed in 4.31.0 CWE-20