[KEV] Arista VeloCloud Orchestrator SQL injection → remote privileged access to the VCO host (CVE-2026-114625)

CISA added CVE-2026-114625 to KEV on 2026-10-23 with confirmed in-the-wild exploitation. It is a SQL injection in the Arista VeloCloud Orchestrator allowing a remote authenticated user to gain superuser/operator privileges and compromise the orchestrator host and its data. RealGround and SOCRadar frame the active exploitation as an edge/control-plane weaponization feeding credential harvesting and ransomware initial access.

Though the target is a managed SD-WAN control plane rather than an AI model, this is the exact class KEV exists to flag: a management/control-plane component that AI agents and automation are increasingly granted access to, and one whose exploitation window in the post-Mythos, AI-accelerated attack cycle can close faster than manual patching. Review any orchestrator reachable by agent workloads or pipelines.

SQL injection (CWE-89) in the VeloCloud Orchestrator that lets a remote attacker access privileged internal functionality and impact the VCO host; exploitation confirmed in the wild and reportedly weaponized by automated scanning/credential-harvesting (k0t) campaigns feeding ransomware affiliates.

Arista VeloCloud Orchestrator (on-prem)

Apply the vendor advisory (Arista Security Advisory 0199) and required KEV mitigation per CISA BOD 26-04; restrict management-interface exposure and monitor for anomalous operator-privilege use.