PatchSiren

PatchSiren cyber security CVE debrief

CVE-2025-5088 Arista Networks CVE debrief

CVE-2025-5088 is a HIGH-severity vulnerability with a CVSS score of 8.7. An authenticated Redis session could be used to obtain full root access to all servers in the CVX cluster. This requires network access to the Redis service on a CVX server and the Redis password. Note that all Redis communication, including authentication, occurs over plaintext. TLS support is tracked under RFE1294850.

Vendor
Arista Networks
Product
EOS / CloudVision eXchange (CVX)
CVSS
HIGH 8.7
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-05
Original CVE updated
2026-06-05
Advisory published
2026-06-05
Advisory updated
2026-06-05

Who should care

Administrators and users of CVX clusters who use Redis services should be aware of this vulnerability. Specifically, those with network access to the Redis service and knowledge of the Redis password are at risk.

Technical summary

The vulnerability allows an attacker with an authenticated Redis session to gain full root access to all servers in the CVX cluster. The attack requires both network access to the Redis service and the Redis password. As of the current date, Redis communication, including authentication, is not encrypted.

Defensive priority

HIGH

Recommended defensive actions

  • Limit network access to the Redis service to only necessary personnel and systems.
  • Use secure communication protocols, such as TLS, for Redis communication. TLS support is tracked under RFE1294850.
  • Regularly review and update Redis passwords.
  • Monitor for suspicious activity on CVX clusters and Redis services.

Evidence notes

The CVE record and NVD detail provide information on the vulnerability. [See CVE-2025-5088 CVE record](resourceLinkAnnotations:cve-org) and [NVD detail](resourceLinkAnnotations:nvd).

Official resources

CVE-2025-5088 was published on 2026-06-05T17:16:29.097Z and modified on 2026-06-05T19:03:48.933Z.