IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
7.1Alta

CVE-2026-111000Privilege escalation through folder move in the folders API

Grafana Grafana Enterprise; Grafana Grafana OSS Publicada: (hace 4 días)

Descripción

A user with the Editor role who can edit a folder can move it, through the folders resource API, under a folder they administer, and so gain Admin on the moved folder and its contents, including the right to change their permissions. The legacy folder move API refuses the same move (improper privilege management).

Debilidad (CWE): CWE-863CWE-269

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
Grafana Grafana Enterprise 12.4.0 – ≤ 12.4.14, 13.0.0 – < 13.0.10
Grafana Grafana OSS 12.4.0 – ≤ 12.4.14, 13.0.0 – < 13.0.10

Referencias y parches

CVE recientes del mismo producto — Grafana

6.3Media
CVE-2026-106472

Server-side request forgery in the Prometheus data source resource API

Grafana Grafana OSS; Grafana Grafana Enterprise; Grafana Prometheus Datasource

Grafana's Prometheus data source passes the resource path supplied by the caller to the configured Prometheus server without restricting it to the supported API endpoints [missing path allowlist]. A user with permission to query the data source can read respo…

5.5Media
CVE-2026-110289

Git Sync connections send credentials to unvalidated server URLs

Grafana Grafana Enterprise; Grafana Grafana OSS

A user with the Organization Admin role could point the server or token URL of a Git Sync connection at a loopback or internal address, and Grafana would then send the connection's OAuth client secret and tokens, or requests signed with the GitHub App private…

7.1Alta
CVE-2026-102589

Cross-instance user impersonation through image renderer JWTs

Grafana Grafana OSS; Grafana Grafana Enterprise

When independent Grafana instances share the same [rendering] renderer_token, an image renderer key issued by one instance is accepted by the others, so a user on one instance could act as the user with the same ID on another (origin validation error). This a…