Skip to content
Sign in
5.4 Medium

CVE-2025-26517 StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a privilege…

Description

StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a privilege escalation vulnerability. Successful exploit could allow an unauthorized authenticated attacker to discover Grid node names and IP addresses or modify Storage Grades.

Affected products and versions

Product Affected versions Fixed in
StorageGRID 11.9 earliest → < 11.9.0.8 11.9.0.8
StorageGRID 11.8 earliest → < 11.8.0.15 11.8.0.15

Other CVEs of StorageGRID

The 8 CVEs of StorageGRID →
CVE-2026-22056 StorageGRID (formerly StorageGRID Webscale) versions 11.5 and higher in a non-standard configuration and scenario are… 2.3 Low CVE-2025-26516 StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a Denial of… 5.3 Medium CVE-2025-26515 StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 without Single Sign-on enabled… 7.5 High CVE-2025-26514 StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a Reflected… 6.4 Medium
Track this CVE