Database/Control plane, storage & DevOps
Pure Storage FlashArray Purity (data path information exposure): Insufficient filtering on certain data paths exposes
CVE-2026-6445Control plane, storage & DevOpscurated
Impact
Insufficient filtering on certain data paths exposes sensitive information to an authenticated low-privileged user of the array.
Who can reach it
Authenticated low-privilege array user.
What to do
Apply the Purity update referenced in Pure's security bulletins. Non-disruptive array software upgrade.
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.