EOS · CVE-2026-121292 · Infrastructure
FIX → 4.36.3M +3 ✓ verified
Arista Security Advisory 0222 (Nov 10, 2026): a malformed RPKI-to-Router Error Report from the RPKI cache makes EOS read past packet bounds. It can terminate or restart the RPKI agent, or expose memory contents through logging. Found internally by Arista, which knows of no exploitation. Arista states no mitigation and no hotfix exist; upgrade.
first public Nov 10, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Arista EOS-based switches and routers (7xxx series, AWE, ZTX-7200, CloudEOS, cEOS-lab, vEOS-lab, CloudVision eXchange) that have an RPKI cache configured and an active RPKI-RTR session for BGP origin validation. An attacker controlling the RPKI cache or the path to it can send the crafted message. Devices without RPKI cache configuration, and CloudVision Portal, Wi-Fi APs, NetVisor, DMF and the other products Arista lists, are not affected.
Not affected if no-rpki-cache-configured
Who cares arista, bgp, eos, network-devices, rpki
show bgp rpki cache on the switch; if no RPKI cache is configured under router bgp (rpki cache <name> / host <addr>) and no RPKI-RTR session is established, the issue cannot be reachedshow version against the affected rangesA malformed Error Report can cause EOS to read beyond packet boundaries, potentially terminating the RPKI agent or exposing unintended memory contents through logging.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
Received malformed Error Report PDU from cache server /var/log/eosUpgrade to 4.36.3M +3