Skip to content
OpenAdvisories
High · 7.8 CVE-2025-54545 EUVD-2025-36728GHSA-mj5g-pwmc-9x7r

On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges.

Published Oct 29, 2025 · Updated Oct 30, 2025 · Assigned by Arista

Vendor: Arista Networks Product: DANZ Monitoring Fabric Category: Network devices

Description

On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges.

Affected products

VendorProductAffectedFixed
Arista Networks DANZ Monitoring Fabric ≤ DMF 8.6.1, ≤ DMF 8.5.2, ≤ CCF 6.2.4, ≤ CVA 7.0, ≤ MCD 2.4.0 —

Advisories 1

References