CVE-2026-101153

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-101153", "assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "state": "PUBLISHED", "assignerShortName": "Arista", "dateReserved": "2026-09-28T08:30:31.034Z", "datePublished": "2026-10-06T19:38:07.896Z", "dateUpdated": "2026-10-06T19:49:31.675Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "shortName": "Arista", "dateUpdated": "2026-10-06T19:38:07.896Z"}, "title": "Security Advisory 0188", "descriptions": [{"lang": "en", "value": "On affected versions of CloudVision Portal (on-premises) or CloudVision Sensor, a path traversal vulnerability exists. An authenticated user with sufficient high privileges could exploit this to extract unintended data from the Sensor.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>On affected versions of CloudVision Portal (on-premises) or CloudVision Sensor, a path traversal vulnerability exists. An authenticated user with sufficient high privileges could exploit this to extract unintended data from the Sensor.</p>"}]}], "affected": [{"vendor": "Arista Networks", "product": "CloudVision Portal", "platforms": ["CloudVision Portal, virtual appliance or physical appliance"], "defaultStatus": "unaffected", "versions": [{"version": "2026.2.0", "status": "affected", "versionType": "custom"}, {"version": "2026.1.0", "lessThanOrEqual": "2026.1.2", "status": "affected", "versionType": "custom"}, {"version": "2025.3.0", "lessThanOrEqual": "2025.3.3", "status": "affected", "versionType": "custom"}, {"version": "2025.2.0", "lessThanOrEqual": "2025.2.3", "status": "affected", "versionType": "custom"}, {"version": "2025.1.0", "lessThanOrEqual": "2025.1.4", "status": "affected", "versionType": "custom"}, {"version": "2024.3.0", "lessThanOrEqual": "2024.3.3", "status": "affected", "versionType": "custom"}]}, {"vendor": "Arista Networks", "product": "CloudVision Sensor", "platforms": ["CloudVision Sensor"], "defaultStatus": "unaffected", "versions": [{"version": "1.4.0", "lessThanOrEqual": "1.4.2", "status": "affected", "versionType": "custom"}, {"version": "1.3.0", "lessThanOrEqual": "1.3.1", "status": "affected", "versionType": "custom"}, {"version": "1.0.0", "lessThan": "1.3.0", "status": "affected", "versionType": "custom"}]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "baseScore": 8, "baseSeverity": "HIGH"}}, {"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H", "baseScore": 7.2, "baseSeverity": "HIGH"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-22", "lang": "en", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}], "impacts": [{"capecId": "CAPEC-126", "descriptions": [{"lang": "en", "value": "CAPEC-126 Path Traversal"}]}], "configurations": [{"lang": "en", "value": "No specific configuration is required to be vulnerable to this issue. This vulnerability is present in the default configuration of affected releases.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>No specific configuration is required to be vulnerable to this issue. This vulnerability is present in the default configuration of affected releases.</p>"}]}], "workarounds": [{"lang": "en", "value": "There is no reliable mitigation other than stopping the sensor component completely, which would prevent all functionality dependent on it from working. To stop the sensor, execute the following command on the CloudVision or Sensor VM:\n\n# Stop sensor completely:\ncvpi stop sensor\n\nTo undo this and to start the sensor again use:\n\n# Start sensor:\ncvpi start sensor", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>There is no reliable mitigation other than stopping the sensor component completely, which would prevent all functionality dependent on it from working. To stop the sensor, execute the following command on the CloudVision or Sensor VM:</p><pre># Stop sensor completely:\ncvpi stop sensor</pre><p>To undo this and to start the sensor again use:</p><pre># Start sensor:\ncvpi start sensor</pre>"}]}], "solutions": [{"lang": "en", "value": "CVE-2026-101153 has been fixed in the following releases:\n\nCloudVision Portal:\n- 2026.2.1 and later releases in the 2026.2.x train\n- 2026.1.3 and later releases in the 2026.1.x train\n\nCloudVision Sensor:\n- 1.4.3 and later releases in the 1.4.x train", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>CVE-2026-101153 has been fixed in the following releases:</p><p><strong>CloudVision Portal:</strong></p><ul><li>2026.2.1 and later releases in the 2026.2.x train</li><li>2026.1.3 and later releases in the 2026.1.x train</li></ul><p><strong>CloudVision Sensor:</strong></p><ul><li>1.4.3 and later releases in the 1.4.x train</li></ul>"}]}], "references": [{"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24804-security-advisory-0188", "tags": ["vendor-advisory"]}], "source": {"advisory": "Security Advisory 0188", "discovery": "INTERNAL", "defects": ["BUG 1898011"]}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-06T19:49:23.342532Z", "id": "CVE-2026-101153", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-06T19:49:31.675Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-101153", "assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "state": "PUBLISHED", "assignerShortName": "Arista", "dateReserved": "2026-09-28T08:30:31.034Z", "datePublished": "2026-10-06T19:38:07.896Z", "dateUpdated": "2026-10-06T19:49:31.675Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "shortName": "Arista", "dateUpdated": "2026-10-06T19:38:07.896Z"}, "title": "Security Advisory 0188", "descriptions": [{"lang": "en", "value": "On affected versions of CloudVision Portal (on-premises) or CloudVision Sensor, a path traversal vulnerability exists. An authenticated user with sufficient high privileges could exploit this to extract unintended data from the Sensor.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>On affected versions of CloudVision Portal (on-premises) or CloudVision Sensor, a path traversal vulnerability exists. An authenticated user with sufficient high privileges could exploit this to extract unintended data from the Sensor.</p>"}]}], "affected": [{"vendor": "Arista Networks", "product": "CloudVision Portal", "platforms": ["CloudVision Portal, virtual appliance or physical appliance"], "defaultStatus": "unaffected", "versions": [{"version": "2026.2.0", "status": "affected", "versionType": "custom"}, {"version": "2026.1.0", "lessThanOrEqual": "2026.1.2", "status": "affected", "versionType": "custom"}, {"version": "2025.3.0", "lessThanOrEqual": "2025.3.3", "status": "affected", "versionType": "custom"}, {"version": "2025.2.0", "lessThanOrEqual": "2025.2.3", "status": "affected", "versionType": "custom"}, {"version": "2025.1.0", "lessThanOrEqual": "2025.1.4", "status": "affected", "versionType": "custom"}, {"version": "2024.3.0", "lessThanOrEqual": "2024.3.3", "status": "affected", "versionType": "custom"}]}, {"vendor": "Arista Networks", "product": "CloudVision Sensor", "platforms": ["CloudVision Sensor"], "defaultStatus": "unaffected", "versions": [{"version": "1.4.0", "lessThanOrEqual": "1.4.2", "status": "affected", "versionType": "custom"}, {"version": "1.3.0", "lessThanOrEqual": "1.3.1", "status": "affected", "versionType": "custom"}, {"version": "1.0.0", "lessThan": "1.3.0", "status": "affected", "versionType": "custom"}]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "baseScore": 8, "baseSeverity": "HIGH"}}, {"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H", "baseScore": 7.2, "baseSeverity": "HIGH"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-22", "lang": "en", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}], "impacts": [{"capecId": "CAPEC-126", "descriptions": [{"lang": "en", "value": "CAPEC-126 Path Traversal"}]}], "configurations": [{"lang": "en", "value": "No specific configuration is required to be vulnerable to this issue. This vulnerability is present in the default configuration of affected releases.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>No specific configuration is required to be vulnerable to this issue. This vulnerability is present in the default configuration of affected releases.</p>"}]}], "workarounds": [{"lang": "en", "value": "There is no reliable mitigation other than stopping the sensor component completely, which would prevent all functionality dependent on it from working. To stop the sensor, execute the following command on the CloudVision or Sensor VM:\n\n# Stop sensor completely:\ncvpi stop sensor\n\nTo undo this and to start the sensor again use:\n\n# Start sensor:\ncvpi start sensor", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>There is no reliable mitigation other than stopping the sensor component completely, which would prevent all functionality dependent on it from working. To stop the sensor, execute the following command on the CloudVision or Sensor VM:</p><pre># Stop sensor completely:\ncvpi stop sensor</pre><p>To undo this and to start the sensor again use:</p><pre># Start sensor:\ncvpi start sensor</pre>"}]}], "solutions": [{"lang": "en", "value": "CVE-2026-101153 has been fixed in the following releases:\n\nCloudVision Portal:\n- 2026.2.1 and later releases in the 2026.2.x train\n- 2026.1.3 and later releases in the 2026.1.x train\n\nCloudVision Sensor:\n- 1.4.3 and later releases in the 1.4.x train", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>CVE-2026-101153 has been fixed in the following releases:</p><p><strong>CloudVision Portal:</strong></p><ul><li>2026.2.1 and later releases in the 2026.2.x train</li><li>2026.1.3 and later releases in the 2026.1.x train</li></ul><p><strong>CloudVision Sensor:</strong></p><ul><li>1.4.3 and later releases in the 1.4.x train</li></ul>"}]}], "references": [{"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24804-security-advisory-0188", "tags": ["vendor-advisory"]}], "source": {"advisory": "Security Advisory 0188", "discovery": "INTERNAL", "defects": ["BUG 1898011"]}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-101153", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-06T19:49:23.342532Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-06T19:49:28.163Z"}}]}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["CloudVision Portal, virtual appliance or physical appliance"], "product": "CloudVision Portal", "vendor": "Arista Networks", "versions": [{"status": "affected", "version": "2026.2.0", "versionType": "custom"}, {"lessThanOrEqual": "2026.1.2", "status": "affected", "version": "2026.1.0", "versionType": "custom"}, {"lessThanOrEqual": "2025.3.3", "status": "affected", "version": "2025.3.0", "versionType": "custom"}, {"lessThanOrEqual": "2025.2.3", "status": "affected", "version": "2025.2.0", "versionType": "custom"}, {"lessThanOrEqual": "2025.1.4", "status": "affected", "version": "2025.1.0", "versionType": "custom"}, {"lessThanOrEqual": "2024.3.3", "status": "affected", "version": "2024.3.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "platforms": ["CloudVision Sensor"], "product": "CloudVision Sensor", "vendor": "Arista Networks", "versions": [{"lessThanOrEqual": "1.4.2", "status": "affected", "version": "1.4.0", "versionType": "custom"}, {"lessThanOrEqual": "1.3.1", "status": "affected", "version": "1.3.0", "versionType": "custom"}, {"lessThan": "1.3.0", "status": "affected", "version": "1.0.0", "versionType": "custom"}]}], "source": "psirt@arista.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "On affected versions of CloudVision Portal (on-premises) or CloudVision Sensor, a path traversal vulnerability exists. An authenticated user with sufficient high privileges could exploit this to extract unintended data from the Sensor."}], "id": "CVE-2026-101153", "lastModified": "2026-10-07T13:38:48.657", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.3, "impactScore": 6.0, "source": "psirt@arista.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "HIGH", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "HIGH", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "psirt@arista.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-101153", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-10-06T19:49:23.342532Z", "version": "2.0.3"}}]}, "published": "2026-10-06T20:17:09.400", "references": [{"source": "psirt@arista.com", "url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24804-security-advisory-0188"}], "sourceIdentifier": "psirt@arista.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "psirt@arista.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["cloudvision_portal,_virtual_appliance_or_physical_appliance"], "status": "affected", "versions": {"scheme": "semver", "value": "2026.2.0"}}, {"platform": ["cloudvision_portal,_virtual_appliance_or_physical_appliance"], "status": "affected", "versions": {"scheme": "semver", "value": "[2026.1.0,2026.1.2]"}}, {"platform": ["cloudvision_portal,_virtual_appliance_or_physical_appliance"], "status": "affected", "versions": {"scheme": "semver", "value": "[2025.3.0,2025.3.3]"}}, {"platform": ["cloudvision_portal,_virtual_appliance_or_physical_appliance"], "status": "affected", "versions": {"scheme": "semver", "value": "[2025.2.0,2025.2.3]"}}, {"platform": ["cloudvision_portal,_virtual_appliance_or_physical_appliance"], "status": "affected", "versions": {"scheme": "semver", "value": "[2025.1.0,2025.1.4]"}}, {"platform": ["cloudvision_portal,_virtual_appliance_or_physical_appliance"], "status": "affected", "versions": {"scheme": "semver", "value": "[2024.3.0,2024.3.3]"}}], "enrichment": {"confidence": 85.0, "confidence_source": "matching", "scores": [{"score": 85.0, "source": "matching"}]}, "original": {"product": "CloudVision Portal", "source": "cna", "vendor": "Arista Networks"}, "product": "cloudvision_portal", "vendor": "arista"}, {"configurations": [{"platform": ["cloudvision_sensor"], "status": "affected", "versions": {"scheme": "semver", "value": "[1.4.0,1.4.2]"}}, {"platform": ["cloudvision_sensor"], "status": "affected", "versions": {"scheme": "semver", "value": "[1.3.0,1.3.1]"}}, {"platform": ["cloudvision_sensor"], "status": "affected", "versions": {"scheme": "semver", "value": "[1.0.0,1.3.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "CloudVision Sensor", "source": "cna", "vendor": "Arista Networks"}, "product": "cloudvision_sensor", "vendor": "arista"}], "created": "2026-10-06T20:30:05.837772+00:00", "title": "Path Traversal Allowing Unintended Data Extraction in CloudVision Portal and Sensor", "updated": "2026-10-09T08:32:46.253917+00:00", "vendors": ["arista", "arista$PRODUCT$cloudvision_portal", "arista$PRODUCT$cloudvision_sensor"]}