Input Validation Flaw in Arista's VCO Feature Affects Enterprise Standard Admins

CVE-2026-17192

What is CVE-2026-17192?

A security vulnerability in Arista's VCO feature allows insufficient validation of user-supplied input. This flaw enables unauthorized requests to internal services, potentially compromising the security of authenticated tenant accounts. The issue specifically impacts users assigned the Enterprise Standard Admin role, who can inadvertently expose these internal services. Although discovered internally by Arista, the company has reported no known malicious exploitation of this vulnerability within customer networks.

References