---
id: "CVE-2026-22058"
kind: "vulnerability"
aliases: ["CVE-2026-22058"]
title: "NetApp StorageGRID: authentication bypass lets attackers with Grid Network access make unauthorized requests"
severity: "critical"
cvss: 9.1
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "netapp", "object-storage", "storagegrid"]
not_affected_if: ["grid-network-isolated"]
published_at: "2026-11-03T22:19:47+00:00"
first_seen_at: "2026-11-03T23:15:09+00:00"
updated_at: "2026-11-03T23:17:24+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22058", "first_seen_at": "2026-11-03T23:15:09+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-11-03T23:17:24+00:00"}]
---

# NetApp StorageGRID: authentication bypass lets attackers with Grid Network access make unauthorized requests

NetApp says StorageGRID 11.3 and higher let an attacker with product-specific knowledge who can reach the Grid Network on certain ports make unauthorized requests. NetApp lists the impact as disclosure of sensitive information or addition or modification of data. NetApp is not aware of public discussion.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the StorageGRID version in the Grid Manager; 11.3 or higher is in NetApp's affected range.
- Check whether hosts outside the grid can reach the Grid Network ports; restrict them to grid nodes.
- Fixed versions are not on NetApp's advisory page. A third-party tracker (OpenCVE, from CNA data, unconfirmed) lists affected as below 11.9.0.15, 12.0.0.9, 12.1.0.1; confirm with NetApp support.

## Timeline

- 2026-11-03T23:15:09+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-22058
- 2026-11-03T23:17:24+00:00 analyst — NetApp NTAP-20261103-0001 read: 11.3+ affected, Grid Network on certain ports, impact is disclosure of sensitive info or add/modify data, no known public discussion. Advisory page lists no fixed versions; OpenCVE (not primary) shows affected <11.9.0.15, 12.0.0.9, 12.1.0.1, so fix left unverified. fix_status 'none' had no vendor source, so I did not assert it.

## Documents

- [advisory] NTAP-20261103-0001 Authentication Bypass Vulnerability in StorageGRID https://security.netapp.com/advisory/NTAP-20261103-0001
- [mentions] OpenCVE CVE-2026-22058 (lists affected range from CNA data) https://app.opencve.io/cve/CVE-2026-22058

## From the sources

StorageGRID (formerly StorageGRID Webscale) versions 11.3 and higher allow an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain ports to make unauthorized requests.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_