https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:24:40 +0000 https://cve.radiocsirt.org/vuln/bit-grafana-2026-17183 <p><strong>Affected:</strong> Bitnami: grafana</p> <p>An authenticated user with permission to create or edit alert rules can bypass datasource query authorization by marking an alert rule query as a server-side expression while referencing a real datasource UID (incorrect authorization). This can expose data accessible through Grafana&#39;s configured datasource credentials to users who lack permission to query that datasource.</p> <p><strong>Affected:</strong> Bitnami: grafana</p> <p>An authenticated user with permission to create or edit alert rules can bypass datasource query authorization by marking an alert rule query as a server-side expression while referencing a real datasource UID (incorrect authorization). This can expose data accessible through Grafana&#39;s configured datasource credentials to users who lack permission to query that datasource.</p> https://cve.radiocsirt.org/vuln/bit-grafana-2026-17183 https://cve.radiocsirt.org/vuln/euvd-2026-360205 EUVD-2026-360205 https://cve.radiocsirt.org/vuln/euvd-2026-360205 https://cve.radiocsirt.org/vuln/fkie_cve-2026-17183 <p>An authenticated user with permission to create or edit alert rules can bypass datasource query authorization by marking an alert rule query as a server-side expression while referencing a real datasource UID (incorrect authorization). This can expose data accessible through Grafana&#39;s configured datasource credentials to users who lack permission to query that datasource.</p> <p>An authenticated user with permission to create or edit alert rules can bypass datasource query authorization by marking an alert rule query as a server-side expression while referencing a real datasource UID (incorrect authorization). This can expose data accessible through Grafana&#39;s configured datasource credentials to users who lack permission to query that datasource.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-17183 https://cve.radiocsirt.org/vuln/ghsa-f74r-h7qj-c63f <p>Summary</p> <p>An authenticated organization user who can create or edit alert rules in a folder can query a datasource for which they do not have datasources:query permission. The attacker sets the client-controlled query field queryType to __expr__ while retaining the UID of a real datasource.</p> <p>The alert-rule authorization path treats the query as a server-side expression and skips datasource permission enforcement, while the evaluator subsequently resolves and executes the query against the real datasource identified by datasourceUid.</p> <p>## Impact</p> <p>This bypass can expose data accessible through Grafana&#39;s configured datasource credentials to a low-privileged user who is not authorized to query that datasource directly. Confidentiality impact is High.</p> <p>Integrity impact is Low because some datasource backends and configured credentials may permit state-changing queries. No availability impact has been demonstrated.</p> <p>## Attack prerequisites</p> <p>- Authenticated, low-privileged user in the same Grafana organization - Permission to create or edit alert rules in an accessible folder - No datasources:query permission for the targeted datasource - Knowledge or discovery of the targeted datasource UID - No user interaction required</p> <p>## Technical details / root cause</p> <p>1. The attacker submits an alert-rule query with queryType: &#34;__expr__&#34; and the UID of a real datasource. 2. The datasource authorization helper skips permission enforcement when query.QueryType == &#34;__expr__&#34;. 3. queryType is clien…</p> <p>Summary</p> <p>An authenticated organization user who can create or edit alert rules in a folder can query a datasource for which they do not have datasources:query permission. The attacker sets the client-controlled query field queryType to __expr__ while retaining the UID of a real datasource.</p> <p>The alert-rule authorization path treats the query as a server-side expression and skips datasource permission enforcement, while the evaluator subsequently resolves and executes the query against the real datasource identified by datasourceUid.</p> <p>## Impact</p> <p>This bypass can expose data accessible through Grafana&#39;s configured datasource credentials to a low-privileged user who is not authorized to query that datasource directly. Confidentiality impact is High.</p> <p>Integrity impact is Low because some datasource backends and configured credentials may permit state-changing queries. No availability impact has been demonstrated.</p> <p>## Attack prerequisites</p> <p>- Authenticated, low-privileged user in the same Grafana organization - Permission to create or edit alert rules in an accessible folder - No datasources:query permission for the targeted datasource - Knowledge or discovery of the targeted datasource UID - No user interaction required</p> <p>## Technical details / root cause</p> <p>1. The attacker submits an alert-rule query with queryType: &#34;__expr__&#34; and the UID of a real datasource. 2. The datasource authorization helper skips permission enforcement when query.QueryType == &#34;__expr__&#34;. 3. queryType is clien…</p> https://cve.radiocsirt.org/vuln/ghsa-f74r-h7qj-c63f https://cve.radiocsirt.org/vuln/opensuse-su-2026:11684-1 <p>grafana-12.4.10-1.1 on GA media</p> <p>grafana-12.4.10-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11684-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-17183 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: grafana</p> <p>An authenticated user with permission to create or edit alert rules can bypass datasource query authorization by marking an alert rule query as a server-side expression while referencing a real datasource UID (incorrect authorization). This can expose data accessible through Grafana&#39;s configured datasource credentials to users who lack permission to query that datasource.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: grafana</p> <p>An authenticated user with permission to create or edit alert rules can bypass datasource query authorization by marking an alert rule query as a server-side expression while referencing a real datasource UID (incorrect authorization). This can expose data accessible through Grafana&#39;s configured datasource credentials to users who lack permission to query that datasource.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-17183 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3355 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Grafana ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Grafana ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3355