High severity8.5NVD Advisory· Published Jul 27, 2026· Updated Jul 30, 2026

CVE-2026-17192

Description

A VCO feature does not sufficiently validate caller-supplied input, allowing requests to be made on behalf of authenticated tenant accounts to internal services that are not otherwise accessible. This vulnerability requires a minimum role of Enterprise Standard Admin.

This issue was discovered internally by Arista and the company is not aware of any malicious uses of this issue in customer networks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Arista/VCO featurellm-create

Patches

Vulnerability mechanics

References

www.arista.com/en/support/advisories-notices/security-advisory/24365-security-advisory-0145nvd

News mentions

No linked articles in our index yet.

cvss	0.552
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000