CVE-2026-22061: Debug Log Information Disclosure Vulnerability in Trident
Trident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an authenticated attacker with access to debug logs to view LUKS passphrases or SMB Active Directory credentials.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Deployments running NetApp Trident versions v25.02.1 through v26.06.1 are exposed if authenticated users can access Trident debug logs. The disclosed data may include LUKS passphrases or SMB Active Directory credentials.
What does an attacker need to exploit it?
An attacker must be authenticated and have access to debug logs. The available information does not indicate that unauthenticated access or remote code execution is involved.
How can I determine whether my environment may be affected?
Check whether the installed Trident version falls between v25.02.1 and v26.06.1, and review which authenticated users or roles can read debug logs. Debug logs should also be treated as potentially containing LUKS passphrases or SMB Active Directory credentials.