CVE-2025-26517

StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a privilege escalation vulnerability. Successful exploit could allow an unauthorized authenticated attacker to discover Grid node names and IP addresses or modify Storage Grades.

Score

CVSS 3.1 5.4 Medium

Status

Analyzed - security-alert@netapp.com

Published

2025-09-19

Last modified

2025-09-19

Weaknesses

CWE-266

Affected products

• Storagegrid (Netapp)

References

• https://security.netapp.com/advisory/NTAP-20250910-0004