A privileged attacker can exploit certain operation to execute arbitrary commands with root privileges, leading to full device compromise. An authenticated user can exploit gRPC Network Security Interface (gNSI) Certz service on Arista EOS-based products to escalate privileges and execute arbitrary OS commands via a crafted Certz Rotate request. The Bootz service is also affected.

CVE-2026-73447 affects Arista EOS-based products via the gRPC Network Security Interface (gNSI) Certz service. An authenticated but privileged attacker can send a crafted Certz Rotate request to escalate privileges and execute arbitrary OS commands with root-level access. This leads to full device compromise. The Bootz service on affected devices is also vulnerable. The vulnerability requires prior authentication, limiting the attack surface somewhat, but the impact of successful exploitation is critical. Arista has published a security advisory (SA-0162) detailing affected versions and mitigations. Network infrastructure devices running Arista EOS should be patched or mitigated promptly.