CVE-2026-120981 · Infrastructure
NO FIX YET
On Arista EOS routers with VPLS-BGP enabled, an attacker who has already set up a BGP session with the provider edge router can change route advertisements for VPLS pseudowires. This causes established routes to churn with other legitimate BGP peers.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Operators running Arista EOS on provider edge routers with VPLS-BGP enabled are affected. An attacker must first establish a BGP session with the PE router, so exposure depends on who can peer with it. Sites without VPLS-BGP, or without untrusted BGP peers, can likely skip it.
Not affected if no-untrusted-bgp-peers, vpls-bgp-disabled
Who cares arista-eos, bgp, network-operators, vpls
Unknown from the sources.
No fix yet, per the sources.
On affected platforms running Arista EOS with VPLS-BGP enabled, an attacker who has established a BGP session with the PE router can affect the route advertisements of VPLS pseudowires, causing a churn of the established routes with other legitimate BGP peers.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.