Quick answers
- Is CVE-2025-5090 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2025-5090 being exploited in the wild.
- How severe is CVE-2025-5090?
- Medium severity, with a CVSS score of 6.5, published 5 June 2026.
- Which products and versions are affected?
- Arista Networks CloudVision eXchange (CVX).
- Is there a fix for CVE-2025-5090?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2025-5090 attacked?
- It is attacked over the network, in a network appliance.
- Am I affected by CVE-2025-5090?
- Check whether you run Arista Networks CloudVision eXchange. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
The vulnerability is classified as Improper Input Validation (CWE-20) within Arista CloudVision eXchange (CVX). The CVX agent fails to properly handle unexpected or malformed TCP messages sent from a connected switch. An attacker who has already gained high-privilege access to a switch within the network can exploit this by sending custom TCP packets to the CVX manager. This causes the CVX agent to crash, leading to a Denial of Service (DoS) and instability of the CVX cluster. The attack requires low-level network reachability (PR:L) but high-privilege access on the originating switch to craft the necessary traffic.
Affected products
- Arista Networks CloudVision eXchange (CVX)
Timeline
- 2026-06-05: advisory: Security advisory published by Arista Networks