{"resourceId":"netapp-advisory-ntap-20261023-0001-brotli-console-agent-20261030","versions":[{"version":"external-df1c88f67771e20ca5a67a73ec3f1525fe836a7318cc52af04f6d8906bc2a2b7","resource":{"id":"netapp-advisory-ntap-20261023-0001-brotli-console-agent-20261030","title":"NetApp advisory NTAP-20261023-0001 (v8.0): actively exploited Brotli flaw affects Console Agent containers and ONTAP Select Deploy; no fixes listed; AIDE and ONTAP 9 not affected","organization":"NetApp (Product Security)","sector":"Strategic partner: management-plane and data-services security","geography":"Global","publishedAt":"Initial release 10/23/2026; version 8.0 last updated 10/30/2026","publicationDate":"2026-10-30","eventDate":"2026-10-23","sourceName":"NetApp Product Security","sourceLabel":"CVE-2026-111497 Brotli Vulnerability in NetApp Products (NTAP-20261023-0001)","sourceUrl":"https://security.netapp.com/advisory/ntap-20261023-0001","evidenceClass":"vendor-claim","outcomeClass":"cautionary","topics":["data-security","infrastructure","operating-model"],"finding":"NetApp's advisory for CVE-2026-111497, a Google Brotli decoder flaw that NetApp says is also known as Node2Shell or HTTP2Shell and scores CRITICAL 9.2, was at version 8.0 on 10/30/2026 with status Interim. Listed as affected: NetApp Console Agent Container (audit), Console Agent Container (e-series) and the ONTAP Select Deploy administration utility. Under investigation: the Console Agent OVA, eleven other Console Agent containers, Data Classification, SolidFire/HCI, XCP and others. Version 8.0 moved six Console Agent containers into that status. ONTAP 9, AI Data Engine, the AIDE MCP Server and the AIDE LangChain Retriever are listed as not affected. The remediation tab lists no patches and no workarounds. Independently, CISA added CVE-2026-111497 to its Known Exploited Vulnerabilities catalog on October 27 based on evidence of active exploitation.","sledRelevance":"Interpretation: SLED teams running NetApp Console agents, which Console documentation ties to Cloud Volumes ONTAP deployments and the AIDE requirements tie to AIDE, now have a KEV-listed flaw in components with no NetApp fix listed. State and local agencies that follow CISA KEV prioritization, and universities with similar policies, will need compensating controls and tracking for these components even though ONTAP 9 itself is not affected.","evidence":"Vendor advisory with product status lists and revision history (1.0 on 10/23 through 8.0 on 10/30). Independent corroboration of exploitation comes from CISA's 10/27 KEV alert and the Canadian Centre for Cyber Security alert AL26-027 (10/28), neither of which mentions NetApp. NetApp's Console what's-new page lists no Console agent release after 4.11.0 (16 September). Its 15 October entry did not render.","architectureImplications":"The Console agent sits between NetApp Console and on-premises or cloud ONTAP and, per the AIDE requirements, exchanges traffic with AIDE. Exposure depends on whether affected containers process untrusted Brotli-compressed input; NetApp does not say. Agents should not be internet-exposed beyond documented outbound needs.","governanceImplications":"KEV listing with no vendor fix triggers exception handling under many state vulnerability policies. Agencies should record risk acceptance or compensating controls and track the Interim advisory through further revisions.","securityPrivacyImplications":"CCCS advises blocking untrusted Brotli-compressed input and monitoring for crashes where patching is not possible. For NetApp components this means restricting inbound reach to Console agent hosts and ONTAP Select Deploy, and watching NetApp for fixed agent releases.","caveats":"Vendor-authored and Interim; the advisory went through eight versions in a week. NetApp gives no NetApp-specific exploitation evidence. CISA and CCCS describe Brotli generally. The page is JavaScript-rendered. First-time source, not in the archive. The 10-30 edition covered the separate PHP2SHELL and MySQL advisories.","streamIds":["netapp"],"roles":{"sales":"Sales framing: this is a trust-and-hygiene conversation, not a sales hook. Customers using Console agents for Cloud Volumes ONTAP or a planned AIDE pilot should hear from their partner that a KEV-listed Brotli flaw affects some agent containers. NetApp lists no fix yet, while ONTAP 9 and AIDE are listed as not affected. Offer help with exposure review. Do not claim customers are safe or compromised; the advisory supports neither statement.","engineering":"Engineering framing: inventory every Console agent, its version and deployment form (OVA or container host), plus ONTAP Select Deploy instances. Confirm none accept untrusted inbound traffic beyond documented needs, because the flaw is in Brotli decoding of crafted compressed data. Apply CCCS-style compensating controls: restrict inbound paths, monitor for process crashes, and watch the advisory's remediation tab and Console agent release notes for a fixed build. Keep AIDE pilots from widening agent exposure.","delivery":"Delivery framing: open a tracked vulnerability item per customer with the advisory version, affected and under-investigation components in use, and compensating controls applied. Re-check the advisory at each revision; it moved from 1.0 to 8.0 in a week. When NetApp publishes a fixed agent, schedule upgrades through the Console agent upgrade procedure and record completion. Pause new agent deployments for AIDE pilots until exposure is reviewed."},"roleDetails":{"sales":{"customerProblem":"Customers depend on Console agents that now carry a KEV-listed vulnerability with no vendor fix listed.","stakeholders":["CISO or security operations lead","Storage and cloud operations team","Vulnerability management coordinator","Account partner or MSP"],"discoveryQuestions":["Where are Console agents deployed and in what form?","Does the customer use ONTAP Select Deploy?","Does policy require KEV remediation deadlines or documented exceptions?","Are AIDE or Cloud Volumes ONTAP pilots planned that add agents?"],"valueHypothesis":"A quick exposure review helps customers meet KEV-driven policy obligations while waiting for NetApp fixes.","potentialEngagement":"Bounded exposure review of Console agents and ONTAP Select Deploy with compensating-control recommendations and advisory tracking.","unsupportedClaims":["Customers are already compromised","ONTAP arrays are affected","A fix is available","NetApp-specific exploitation has occurred"]},"engineering":{"fit":"Applies wherever Console agents (OVA or container) or ONTAP Select Deploy are present.","architectureIntegration":"Console agent bridges NetApp Console with ONTAP and AIDE; ONTAP Select Deploy manages software-defined ONTAP.","prerequisites":["Inventory of agents and Select Deploy instances","Network path documentation for agent hosts","Access to advisory updates"],"constraints":["No patches or workarounds listed as of v8.0","Many agent containers still under investigation","Advisory does not state attack preconditions for NetApp components"],"security":"Limit inbound exposure of agent and Deploy hosts, monitor for crashes and anomalies, and prioritize under KEV policy.","proofOfValue":["Verify no agent host accepts untrusted inbound connections","Confirm monitoring alerts on agent process crashes","Track advisory revisions until a fixed agent build is listed"]},"delivery":{"work":"Inventory, apply compensating controls, document exceptions and schedule upgrades when fixes appear.","dependencies":["NetApp fixed release","Customer change windows","Security exception process"],"ownership":"Security operations owns tracking and exceptions; storage or cloud operations owns agent upgrades.","skillsAdoption":"Operations staff need the Console agent upgrade procedure and a habit of advisory revision checks.","governanceCheckpoints":["Documented KEV exception or compensating control","Review at each advisory revision","Post-upgrade verification"],"acceptanceCriteria":["Proposed: all agents inventoried with versions","Proposed: compensating controls documented for each affected component","Proposed: upgrade completed within the customer KEV window after a fix is published"],"risks":["Fix delays beyond policy deadlines","Under-investigation components later confirmed affected","New AIDE pilots adding exposed agents"]}},"retrievedAt":"2026-11-01T03:05:26Z","enrichedAt":"2026-11-01T03:12:11Z","enrichmentBasis":"retrieved source","accessibilityWorkforceImplications":"Interpretation: adds security-operations tracking work; no accessibility content in the source.","procurementImplications":"Interpretation: managed-service or support contracts should define who tracks vendor advisories and applies agent fixes.","operatingModelImplications":"Interpretation: Console agents are now part of the patch-critical estate alongside ONTAP, so SaaS-managed components need the same advisory discipline.","sourceVerification":{"openedUrl":"https://security.netapp.com/advisory/ntap-20261023-0001","referenceExcerpt":"Google Brotli versions 1.0.3 through 1.2.0 are susceptible to a vulnerability known alternatively as Node2Shell or HTTP2Shell","promptVersion":"sled-research-v4.0","model":null,"basis":"agent-reported inspection"}}}]}