Description
All versions of StorageGRID (formerly StorageGRID Webscale) in default & common configurations allow an unauthenticated attacker to access a limited set of APIs that are intended for use within the grid.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NETAPP | StorageGRID (formerly StorageGRID Webscale) | < 11.9.0.15, 12.0.0.9, 12.1.0.1 | 11.9.0.15, 12.0.0.9, 12.1.0.1 |
Advisories 1
- WID-SEC-2026-4318 NetApp StorageGRID: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 3, 2026