CVE-2026-22051: Infoleak
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information Disclosure vulnerability. Successful exploit could allow an authenticated attacker with low privileges to run arbitrary metrics queries, revealing metric results that they do not have access to.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
StorageGRID (formerly StorageGRID Webscale)to a version that resolves this vulnerability.Fixed in 11.9.0.13 - Upgrade
Upgrade
StorageGRID (formerly StorageGRID Webscale)to a version that resolves this vulnerability.Fixed in 12.0.0.6
Event History
Frequently Asked Questions
What is the severity of CVE-2026-22051?
CVE-2026-22051 is classified as an Information Disclosure vulnerability, which can potentially compromise sensitive metric data.
How do I fix CVE-2026-22051?
To mitigate CVE-2026-22051, you should upgrade to NetApp StorageGRID versions 11.9.0.13 or 12.0.0.6 or later.
Who is affected by CVE-2026-22051?
CVE-2026-22051 affects users of NetApp StorageGRID versions prior to 11.9.0.13 and 12.0.0.6.
What type of attackers can exploit CVE-2026-22051?
An authenticated attacker with low privileges can exploit CVE-2026-22051 to run arbitrary metrics queries.
What are the consequences of CVE-2026-22051 exploitation?
Exploitation of CVE-2026-22051 can lead to unauthorized access to sensitive metric results, potentially revealing confidential information.