Is CVE-2025-5088 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-5088 being exploited in the wild.

How severe is CVE-2025-5088?

High severity, with a CVSS score of 8.3, published 5 June 2026.

Which products and versions are affected?

Arista Networks CloudVision Exchange (CVX) Cluster.

Is there a fix for CVE-2025-5088?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2025-5088 attacked?

It is attacked over the network, in a hosted service.

Am I affected by CVE-2025-5088?

Check whether you run Arista Networks CloudVision Exchange Cluster. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-5088: Arista CVX privilege escalation to root via Redis session

CVE-2025-5088 · Severity: high · CVSS 8.3 · Published 2026-06-05

A vulnerability in Arista CloudVision Exchange (CVX) allows an attacker with access to the Redis database service to gain full administrative control over all servers in the cluster. To exploit this, an attacker must have the Redis password and network access to the service, which currently transmits data in unencrypted plain text. Successful exploitation results in a total compromise of the CVX infrastructure, potentially leading to unauthorized data access or service disruption.

Technologies: Arista Networks CloudVision Exchange Cluster. Vendors: Arista Networks.

Quick answers

Is CVE-2025-5088 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-5088 being exploited in the wild.
How severe is CVE-2025-5088?: High severity, with a CVSS score of 8.3, published 5 June 2026.
Which products and versions are affected?: Arista Networks CloudVision Exchange (CVX) Cluster.
Is there a fix for CVE-2025-5088?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2025-5088 attacked?: It is attacked over the network, in a hosted service.
Am I affected by CVE-2025-5088?: Check whether you run Arista Networks CloudVision Exchange Cluster. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A privilege escalation vulnerability (CWE-269) exists in Arista CloudVision Exchange (CVX) where an authenticated Redis session can be used to gain root-level access across the entire cluster. The vulnerability stems from improper privilege management within the CVX cluster's interaction with its Redis component. An attacker requires network reachability to the Redis service and valid credentials; however, the risk is elevated because Redis authentication and communication currently occur over plaintext. By leveraging an established session, an attacker can escalate privileges to root on all cluster nodes. Arista is tracking TLS implementation for this service under RFE1294850.

Affected products

Arista Networks CloudVision Exchange (CVX) Cluster

Timeline

2026-06-05: advisory: Initial advisory published by Arista Networks

References

https://www.arista.com/en/support/advisories-notices/security-advisory/22868-security-advisory-0126

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.