Description
An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Network Provisioning Image Repository.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Arista Networks | CloudVision Portal | 2026.2.0, 2026.1.0 – ≤ 2026.1.2, 2025.3.0 – ≤ 2025.3.3, 2018.1.0 – < 2025.3.0 | 2025.3.0 |