CVE-2026-22061

Received Received - Intake

Authenticated Debug Log Exposure in Trident

Publication date: 2026-10-09

Last updated on: 2026-10-09

Assigner: NetApp, Inc.

Description

Trident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an authenticated attacker with access to debug logs to view LUKS passphrases or SMB Active Directory credentials.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-09

Last Modified

2026-10-09

Generated

2026-10-10

AI Q&A

2026-10-10

EPSS Evaluated

N/A

NVD

CVE-2026-22061

EUVD

EUVD-2026-96020

Affected Vendors & Products

Vendor	Product	Version / Range
NetApp	Trident	v25.02.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-215	The product inserts sensitive information into debugging code, which could expose this information if the debugging code is not disabled in production.

Attack-Flow Graph

Executive Summary

This vulnerability affects NetApp Trident versions between v25.02.1 and v26.06.1. An authenticated attacker with access to debug logs could potentially view sensitive credentials such as LUKS passphrases or SMB Active Directory credentials.

Detection Guidance

Check Trident debug logs for exposed LUKS passphrases or SMB Active Directory credentials. Search logs for plaintext credential entries or sensitive data leaks.

Impact Analysis

If exploited, this vulnerability could allow unauthorized access to encrypted data or Active Directory resources, leading to data breaches, unauthorized system access, or further network compromise depending on the exposed credentials.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, potentially violating GDPR (data protection) and HIPAA (health information privacy) requirements, resulting in legal penalties, reputational damage, and loss of compliance certifications.

Mitigation Strategies

Upgrade Trident to a version beyond v26.06.1. Review and sanitize debug logs for exposed credentials. Rotate any compromised LUKS passphrases or SMB Active Directory credentials immediately.

Hi! I’m here to help you understand CVE-2026-22061. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70