Description
This vulnerability affects customers using Arista Pathfinder for WAN path selection with Border Gateway Protocol-Link State (BGP-LS) configured for Dynamic Path Selection (DPS). On affected platforms running Arista EOS with BGP-LS configured for DPS, an attacker who has established an authenticated BGP-LS session with the device can send a specially crafted BGP packet to cause incorrect WAN path selection and disrupt traffic forwarding.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Arista Networks | EOS | 1.0.0 <4.32.0F | — |
| Arista Networks | EOS | 4.33.0F ≤4.33.10M | — |
| Arista Networks | EOS | 4.34.0F ≤4.34.8M | — |
| Arista Networks | EOS | 4.36.0F ≤4.36.2F | — |
| Arista Networks | EOS | 4.35.0F ≤4.35.6M | — |
| Arista Networks | EOS | 4.32.0F <4.33.0F | — |
Advisories 1
- WID-SEC-2026-4509 Arista EOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 10, 2026