High severity · published Jun 5, 2026
CVE-2025-5088
Arista CloudVision Exchange (CVX) Cluster Privilege Escalation via MCS Redis Session
8.3
CVSS
0.3%
EPSS
No
On KEV
Description
An authenticated Redis session could be used to obtain full root access to all servers in the CVX cluster. Note that this would require an attacker to have both network access to the Redis service on a CVX server and the Redis password. Please note that all Redis communication, including authentication, occurs over plaintext in the present day. TLS support is tracked under RFE1294850.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 25% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EC
EOS / CloudVision eXchange (CVX) · Arista Networks
4.34.0F through 4.34.1F; 4.33.0M through 4.33.4M; 4.32.0M through 4.32.6M; 4.31.0M through 4.31.8M; 4.30.0 before 4.31.0 · source: vendor
Affected product
EC
EOS / CloudVision eXchange (CVX)
Arista Networks
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-5088
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-5088
www.arista.com
https://www.arista.com/en/support/advisories-notices/security-advisory/22868-security-advisory-0126
More from EOS / CloudVision eXchange (CVX)
6.5
CVE-2025-5090
Arista CloudVision Exchange Cluster Instability via Unexpected Switch Messages
6.5
CVE-2025-5089
Arista EOS SysDB Agent Denial of Service via Malformed CVX Client/Server Messages