CVE-2025-26517

CVE-2025-26517 Privilege Escalation Vulnerability in StorageGRID (formerly StorageGRID Webscale)

State: Published
Severity: 5.4 Medium
Published: Sep 19, 2025
Updated: Sep 19, 2025
Reserved: Feb 11, 2025

Description

StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a privilege escalation vulnerability. Successful exploit could allow an unauthorized authenticated attacker to discover Grid node names and IP addresses or modify Storage Grades.

Scores

CVSS	Score	Vector	Source
3.1	5.4 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N	netapp

Weaknesses

CWE-266 Incorrect Privilege Assignment

Affected Products

Product	Versions
StorageGRIDNetApp	before 11.8.0.15Affected before 11.9.0.8Affected

References

https://security.netapp.com/advisory/NTAP-20250910-0004

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.