Vulnerability · Published Jun 5, 2026 · Assigned by Arista

CVE-2025-5088Arista CloudVision Exchange (CVX) Cluster Privilege Escalation via MCS Redis Session

High 8.3

In plain English

A high-severity privilege mismanagement in EOS / CloudVision eXchange (CVX) from Arista Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities).

Severity (CVSS 3.1)8.3High

Exploit odds (30 days)0.3%top 74.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

An authenticated Redis session could be used to obtain full root access to all servers in the CVX cluster. Note that this would require an attacker to have both network access to the Redis service on a CVX server and the Redis password. Please note that all Redis communication, including authentication, occurs over plaintext in the present day. TLS support is tracked under RFE1294850.

Affected products (as reported)

Vendor	Product	Versions
Arista Networks	EOS / CloudVision eXchange (CVX)	4.34.0F – through 4.34.1F4.33.0M – through 4.33.4M4.32.0M – through 4.32.6M4.31.0M – through 4.31.8M4.30.0 – before 4.31.0

Weakness: CWE-269 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

References

https://www.arista.com/en/support/advisories-notices/security-advisory/22868-security-advisory-0126 vendor-advisory