CVE-2025-2327: Pure Storage Flasharray

Medium severity, CVSS 5.1. EPSS: 0.2% chance of exploitation in the next 30 days.

A flaw exists in FlashArray whereby the Key Encryption Key (KEK) is logged during key rotation when RDL is configured.

Affected products

• Pure Storage Flasharray: from 6.0.0, up to and including 6.0.9; from 6.1.0, up to and including 6.1.25; from 6.2.0, up to and including 6.2.17; from 6.3.0, up to and including 6.3.21; from 6.4.0, up to and including 6.4.10; from 6.5.0, up to and including 6.5.10; …

Published 2025-06-16. Last modified 2026-06-17.