PT-2025-34547 · Netapp · Storagegrid

Published 2025-08-23 · Updated 2025-09-20 · CVE-2025-26517

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions StorageGRID versions prior to 11.8.0.15 StorageGRID versions prior to 11.9.0.8

Description StorageGRID is susceptible to a privilege escalation issue. A successful exploit could allow an unauthorized, authenticated attacker to discover Grid node names and IP addresses or modify Storage Grades.

Recommendations Update StorageGRID to version 11.8.0.15 or later. Update StorageGRID to version 11.9.0.8 or later.

Fix

LPE

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2025-26517

Affected Products

Storagegrid

References · 5

• https://osv.dev/vulnerability/CVE-2025-26517 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-26517 · Security Note
• https://security.netapp.com/advisory/NTAP-20250910-0004 · Vendor Advisory
• https://twitter.com/CVEnew/status/1969291934171623856 · Twitter Post
• https://twitter.com/Cezar_H_Linux/status/1959329817846779912 · Twitter Post