Skip to content
VulniPulse
Advisory severityMedium5.6NetApp Updated

Medium [CVE-2025-29088] SQLite Vulnerability in NetApp Products

This medium-severity NetApp advisory covers CVE-2025-29088 affecting NetApp HCI Compute Node (Bootstrap OS).

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.

NTAP-20250605-0010 Source published Source updated

VulniPulse record published Record updated

Affected products & platforms
NetAppElement Software
Open source advisory

Android app · Google Play

Monitor future NetApp CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery

Summary

Multiple NetApp products incorporate SQLite. SQLite versions 3.49.0 prior to 3.49.1 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS).

Affected products: NetApp HCI Compute Node (Bootstrap OS). NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status.

NetApp states there is no workaround available at this time.

Affected versions
  • 3.49.0
  • 3.49.1

Official advisory · high-confidence parse· fetched 23 days ago·verify at source

Fixed versions

No fixed release is recorded yet. That does not prove no patch exists — confirm against the vendor advisory.

Official advisory · high-confidence parse· fetched 23 days ago·verify at source

Mitigation checklist

Recommended fix / mitigation
  • NetApp HCI Compute Node (Bootstrap OS) has no planned fix; migrate to a supported release or product and consult NetApp's end-of-support notice.

Official advisory · high-confidence parse· fetched 23 days ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.