CVE-2026-101150

Insufficient validation of OIDC bearer token configuration could allow a user with specific high privileges to direct requests to arbitrary destinations.

Score

CVSS 4.0 5.1 Medium

Status

Awaiting Analysis - psirt@arista.com

Published

2026-10-06

Last modified

2026-10-07

Weaknesses

CWE-918

Affected products

• Cloudvision Portal (Arista Networks)

References

• https://www.arista.com/en/support/advisories-notices/security-advisory/24802-security-advisory-0186