{"resourceId":"netapp-advisory-ntap-20261030-0015-pyjwt-critical-v2-20261105","versions":[{"version":"external-1835c10277ab75e98da7cc87b9fbfaf115f0edfc5d2be5b10069a1a886795097","resource":{"id":"netapp-advisory-ntap-20261030-0015-pyjwt-critical-v2-20261105","title":"NetApp advisory NTAP-20261030-0015 v2.0: critical PyJWT flaw (CVE-2026-102268); ransomware-protection agent cleared on 5 Nov","organization":"NetApp Product Security","sector":"Storage vendor security advisory","geography":"Global","publishedAt":"Advisory v2.0, last updated 5 November 2026","publicationDate":"2026-11-05","eventDate":null,"sourceName":"NetApp Product Security","sourceLabel":"NetApp, Security Advisory NTAP-20261030-0015, v2.0, 5 November 2026","sourceUrl":"https://security.netapp.com/advisory/ntap-20261030-0015","evidenceClass":"vendor-claim","outcomeClass":"cautionary","topics":["data-security","infrastructure","developers-agents"],"finding":"On 5 November 2026 NetApp revised NTAP-20261030-0015 to v2.0 for CVE-2026-102268, a critical (CVSS 3.1 score 9.1) PyJWT issue through 2.13.0 that can lead to disclosure of sensitive information or addition or modification of data. The revision moved NetApp Console Agent Container (ransomware-protection) to Products Not Affected. The official advisory API still lists no products under Affected; Investigating includes Console Agent Container (compliance), Console Agent OVA, NetApp Data Classification, SolidFire & HCI management and storage nodes, and NetApp XCP NFS and SMB. AI Data Engine (AIDE), ONTAP 9, StorageGRID, SnapCenter and Active IQ Unified Manager appear on the Not Affected list. Status remains Interim; public discussion noted; workarounds: none at this time; no fixes listed.","sledRelevance":"Relevant to SLED estates using NetApp Console agents, Data Classification or XCP migration tools—the components still under Investigating—while AIDE-based AI metadata pipelines and core ONTAP 9 are listed Not Affected. Agencies and campuses modernizing AI data governance with Console agents should verify which agent containers they deploy.","evidence":"Opened the rendered advisory page via WebFetch and the official adv_api JSON for NTAP-20261030-0015; read summary, impact, scoring, revision history, investigating and unaffected lists. Vendor self-disclosure; GitHub PyJWT advisory referenced.","architectureImplications":"Treat Investigating Console Agent, Data Classification and XCP components as pending exposure until cleared; keep them off untrusted networks and re-check scope before expanding AI data-classification agents.","governanceImplications":"Track Interim status until Investigating products receive fixes or Not Affected disposition; record which Console Agent containers are in production.","securityPrivacyImplications":"Successful exploitation could disclose sensitive information or add or modify data where vulnerable PyJWT is reachable.","caveats":"Interim; Affected list empty; Investigating products may still be cleared; no workaround or fix published; product lists from NetApp adv_api (HTML page omitted tables); AIDE Not Affected does not prove every Console Agent container is safe.","streamIds":["netapp"],"roles":{"sales":"Frame this as risk hygiene for customers running NetApp Console agents, Data Classification or XCP—not as an AIDE sales wedge. The 5 November v2.0 of NTAP-20261030-0015 keeps CVE-2026-102268 critical (9.1), clears the ransomware-protection Console Agent container, and leaves compliance agent, OVA, Data Classification, SolidFire/HCI and XCP under Investigating, while listing AIDE and ONTAP 9 Not Affected. Offer a bounded Console Agent / XCP inventory. Do not claim AIDE is affected, that Investigating products are confirmed Affected, or that exploitation is confirmed in SLED.","engineering":"Enumerate Console Agent Container (compliance), Console Agent OVA, Data Classification and XCP NFS/SMB deployments still listed as Investigating, and confirm their network exposure. Prefer isolating those management and migration tools until NetApp publishes fixes or clears them. Rely on the Not Affected listing for AIDE and ONTAP 9 only after verifying the customer is not also running Investigating Console Agent containers on the same estate.","delivery":"Open a tracking item owned by security operations with the storage and data-governance owners. Close when Investigating Console Agent, Data Classification and XCP products are patched or Not Affected and any exposed agent endpoints are inventoried. Acceptance criteria below are proposals, not observed results. Risks include mistaking AIDE’s Not Affected status for blanket Console Agent safety and missing XCP hosts used in migrations."},"roleDetails":{"sales":{"customerProblem":"SLED teams need clarity on whether Console agents, Data Classification or XCP sit in the PyJWT Investigating set.","stakeholders":["CISO","Storage manager","Data governance lead"],"discoveryQuestions":["Which NetApp Console Agent containers or OVA do you run?","Do you use NetApp Data Classification or XCP NFS/SMB?"],"valueHypothesis":"Accurate container-level inventory keeps AI data-platform work from stalling on unclear advisory scope.","potentialEngagement":"A bounded Console Agent / XCP advisory-mapping workshop.","unsupportedClaims":["AIDE is affected","Any Investigating product is confirmed Affected","Active SLED exploitation"]},"engineering":{"fit":"Estates with Investigating Console Agent, Data Classification or XCP components; low fit for AIDE-only stacks listed Not Affected.","architectureIntegration":"Isolate Investigating agent and XCP endpoints from untrusted networks pending fixes.","prerequisites":["Console Agent container inventory","XCP and Data Classification deployment map"],"constraints":["Interim advisory","Empty Affected list","No workaround or fix"],"security":"Limit exposure of Investigating PyJWT-bearing components; patch when NetApp publishes fixes.","proofOfValue":["Investigating components mapped","Agent/XCP endpoints unreachable from non-admin segments"]},"delivery":{"work":"Inventory Investigating components, restrict access, track the advisory, patch when listed.","dependencies":["NetApp product disposition and fixes","Change window for agents/XCP"],"ownership":"Security operations with storage and data-governance owners.","skillsAdoption":"No new skills; container and tool inventory discipline.","governanceCheckpoints":["Change approval for agent/XCP updates","Close only when Investigating items are cleared or patched"],"acceptanceCriteria":["Investigating Console/XCP/Data Classification components inventoried (proposal)","Listed products patched or confirmed Not Affected (proposal)"],"risks":["Assuming AIDE Not Affected covers all Console Agents","Overlooked XCP migration hosts"]}},"retrievedAt":"2026-11-05T22:06:55-06:00","enrichedAt":"2026-11-05T22:11:06-06:00","enrichmentBasis":"retrieved source","accessibilityWorkforceImplications":"SLED teams may need partner help to map Console Agent container variants and XCP usage to the Investigating list.","procurementImplications":"No new purchase; prioritize patch readiness under existing support for Investigating Console/XCP components.","operatingModelImplications":"Security, storage and data-governance owners should jointly track Console Agent and classification tooling.","peerReview":"unknown","sourceVerification":{"openedUrl":"https://security.netapp.com/advisory/ntap-20261030-0015","referenceExcerpt":"Successful exploitation of this vulnerability could lead to disclosure of sensitive information or addition or modification of data.","promptVersion":"sled-research-v4.0","model":null,"basis":"agent-reported inspection"}}}]}