CVE-2026-22061 CVE-2026-22061 Debug Log Information Disclosure Vulnerability in Trident
An authenticated attacker with debug log access can view sensitive LUKS passphrases or SMB credentials in NetApp Trident.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-22061?
CVE-2026-22061 is a high-severity vulnerability in NetApp Trident, published on 9 Oct 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Trident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an authenticated attacker with access to debug logs to view LUKS passphrases or SMB Active Directory credentials.
Weakness: CWE-215
Which versions are affected by CVE-2026-22061?
How do I fix CVE-2026-22061?
No fix has been published for CVE-2026-22061 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-22061 being exploited?
There is no known exploitation of CVE-2026-22061 in the wild and no public exploit code.
Sources
Also known as GHSA-h9gv-qj3w-x5ff.