RHSA-2026:68778
Vulnerability from csaf_redhat - Published: 2026-09-17 21:04 - Updated: 2026-09-21 11:38Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Severity
Moderate
Notes
Topic: An update for Red Hat Hardened Images RPMs is now available.
Details: This update includes the following RPMs:
grafana13.2:
* grafana13.2-13.2.1-0.5.hum1 (aarch64, x86_64)
* grafana13.2-13.2.1-0.5.hum1.src (src)
Security Fix(es):
grafana13.2:
* CVE-2026-81871
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Grafana. An authenticated editor user could exploit this vulnerability to delete any annotation, even those for which they lack read permissions. This unauthorized action compromises the integrity of data by allowing deletion of information beyond their intended access scope.
4.3 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in Grafana Live. An authenticated user with access to the Grafana Live API can exploit the push endpoint by sending a large or streaming request body. This can lead to unbounded memory allocation, potentially causing out-of-memory conditions and resulting in a Denial of Service (DoS) for the affected system.
6.5 (Medium)
Affected products
Fixed
3 products, the same list as for
CVE-2026-28374
Threats
Impact
Moderate
A flaw was found in Grafana Live, where a race condition allows authenticated users with a Viewer role to trigger a server crash. By sending concurrent requests, these users can cause a fatal map access error, leading to complete service unavailability (Denial of Service). This requires a restart of the Grafana server to restore service.
6.5 (Medium)
Affected products
Fixed
3 products, the same list as for
CVE-2026-28374
Threats
Impact
Moderate
A flaw was found in Grafana. An authenticated user with editor privileges could exploit a Broken Access Control (BAC) vulnerability in the Snapshot API. This flaw allows an editor to delete any dashboard snapshot, even those they do not have explicit read or write access to, leading to unauthorized data integrity loss.
6.5 (Medium)
Affected products
Fixed
3 products, the same list as for
CVE-2026-28374
Threats
Impact
Moderate
A flaw was found in Grafana. An authenticated user can exploit a vulnerability in the plugin resources endpoint by sending a request that causes unbounded memory allocation. This occurs when the system attempts to read the entire request body into memory. Successful exploitation can lead to an out-of-memory condition, resulting in a denial of service (DoS) for the system.
6.5 (Medium)
Affected products
Fixed
3 products, the same list as for
CVE-2026-28374
Threats
Impact
Moderate
A flaw in Grafana's Auth Proxy IPv6 allow-list incorrectly defaults to a broad /32 subnet mask instead of a strict /128. This misconfiguration allows remote attackers to bypass access restrictions, potentially leading to unauthorized access and data manipulation.
7.4 (High)
Affected products
Fixed
3 products, the same list as for
CVE-2026-28374
Threats
Impact
Moderate
A flaw was found in Grafana. A user with editor privileges can overwrite a dashboard not owned by them, leading to privilege escalation on that specific dashboard. This allows the editor to gain administrative control over the affected dashboard.
7.1 (High)
Affected products
Fixed
3 products, the same list as for
CVE-2026-28374
Threats
Impact
Moderate
A flaw was found in Grafana. A remote attacker with authenticated access to a SQL datasource can exploit a vulnerability in the `$__timeGroup` macro. By sending specially crafted queries, an attacker can cause an Out of Memory (OOM) error, leading to the Grafana server crashing and resulting in a Denial of Service (DoS). This can disrupt the availability of the Grafana instance.
6.5 (Medium)
Affected products
Fixed
3 products, the same list as for
CVE-2026-28374
Threats
Impact
Moderate
A flaw was found in Grafana. An authenticated attacker can exploit a vulnerability in SQL Expressions to read arbitrary files from the Grafana server's filesystem. This information disclosure is possible only when the sqlExpressions feature toggle is enabled.
6.3 (Medium)
Affected products
Fixed
3 products, the same list as for
CVE-2026-28374
Threats
Impact
Moderate
A flaw was found in Grafana. When a user's access to mint tokens for a service account is revoked, the system may temporarily allow the user to continue minting tokens for a few seconds. This could lead to a temporary bypass of access control, potentially enabling unauthorized actions if the tokens are used before the revocation fully propagates.
5.9 (Medium)
Affected products
Fixed
3 products, the same list as for
CVE-2026-28374
Threats
Impact
Moderate
A flaw was found in OpenTelemetry-Go, specifically within its gRPC log exporter. This vulnerability allows a network attacker to bypass the intended private Certificate Authority (CA) pinning and mutual Transport Layer Security (TLS) configurations. The issue arises because the environment-only TLS path incorrectly uses system-trusted certificates instead of the application's configured client certificates. This bypass enables an attacker to intercept and spoof the collector connection, potentially leading to the unauthorized reading or alteration of sensitive log telemetry.
6.5 (Medium)
Affected products
Fixed
3 products, the same list as for
CVE-2026-28374
Threats
Impact
Moderate
A flaw was found in the OpenTelemetry-Go `BatchingProcessor` component. A remote attacker can exploit this by sending a high volume of log emissions, which can fill the asynchronous export buffer. This causes the processor to enter a tight CPU loop, repeatedly retrying to export logs without proper waiting mechanisms. The consequence is the exhaustion of CPU resources, leading to a degradation or denial of service (DoS) in the affected application.
5.3 (Medium)
Affected products
Fixed
3 products, the same list as for
CVE-2026-28374
Threats
Impact
Moderate
References
82 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat Hardened Images RPMs is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "This update includes the following RPMs:\n\ngrafana13.2:\n * grafana13.2-13.2.1-0.5.hum1 (aarch64, x86_64)\n * grafana13.2-13.2.1-0.5.hum1.src (src)\n\nSecurity Fix(es):\n\ngrafana13.2:\n * CVE-2026-81871",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:68778",
"url": "https://access.redhat.com/errata/RHSA-2026:68778"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-81871",
"url": "https://access.redhat.com/security/cve/CVE-2026-81871"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://images.redhat.com/",
"url": "https://images.redhat.com/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33380",
"url": "https://access.redhat.com/security/cve/CVE-2026-33380"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33378",
"url": "https://access.redhat.com/security/cve/CVE-2026-33378"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-28374",
"url": "https://access.redhat.com/security/cve/CVE-2026-28374"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33377",
"url": "https://access.redhat.com/security/cve/CVE-2026-33377"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-28380",
"url": "https://access.redhat.com/security/cve/CVE-2026-28380"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33381",
"url": "https://access.redhat.com/security/cve/CVE-2026-33381"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-28376",
"url": "https://access.redhat.com/security/cve/CVE-2026-28376"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-28379",
"url": "https://access.redhat.com/security/cve/CVE-2026-28379"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33376",
"url": "https://access.redhat.com/security/cve/CVE-2026-33376"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-28383",
"url": "https://access.redhat.com/security/cve/CVE-2026-28383"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-81872",
"url": "https://access.redhat.com/security/cve/CVE-2026-81872"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68778.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
"tracking": {
"current_release_date": "2026-09-21T11:38:32+00:00",
"generator": {
"date": "2026-09-21T11:38:32+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.0"
}
},
"id": "RHSA-2026:68778",
"initial_release_date": "2026-09-17T21:04:02+00:00",
"revision_history": [
{
"date": "2026-09-17T21:04:02+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-18T17:08:43+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-21T11:38:32+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Hardened Images"
},
{
"branches": [
{
"category": "product_version",
"name": "grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"product": {
"name": "grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"product_id": "grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana13.2@13.2.1-0.5.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "grafana13.2-0:13.2.1-0.5.hum1@src",
"product": {
"name": "grafana13.2-0:13.2.1-0.5.hum1@src",
"product_id": "grafana13.2-0:13.2.1-0.5.hum1@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana13.2@13.2.1-0.5.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "grafana13.2-0:13.2.1-0.5.hum1@x86_64",
"product": {
"name": "grafana13.2-0:13.2.1-0.5.hum1@x86_64",
"product_id": "grafana13.2-0:13.2.1-0.5.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana13.2@13.2.1-0.5.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana13.2-0:13.2.1-0.5.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64"
},
"product_reference": "grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana13.2-0:13.2.1-0.5.hum1@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src"
},
"product_reference": "grafana13.2-0:13.2.1-0.5.hum1@src",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana13.2-0:13.2.1-0.5.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
},
"product_reference": "grafana13.2-0:13.2.1-0.5.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-28374",
"cwe": {
"id": "CWE-1220",
"name": "Insufficient Granularity of Access Control"
},
"discovery_date": "2026-05-13T20:02:21.923428+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477253"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Grafana. An authenticated editor user could exploit this vulnerability to delete any annotation, even those for which they lack read permissions. This unauthorized action compromises the integrity of data by allowing deletion of information beyond their intended access scope.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "grafana: Grafana: Unauthorized annotation deletion by editor users",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-28374"
},
{
"category": "external",
"summary": "RHBZ#2477253",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477253"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-28374",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28374"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28374",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28374"
},
{
"category": "external",
"summary": "https://grafana.com/security/security-advisories/cve-2026-28374",
"url": "https://grafana.com/security/security-advisories/cve-2026-28374"
}
],
"release_date": "2026-05-13T19:28:40.053000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-17T21:04:02+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68778"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "grafana: Grafana: Unauthorized annotation deletion by editor users"
},
{
"cve": "CVE-2026-28376",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-13T20:02:43.104997+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477259"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Grafana Live. An authenticated user with access to the Grafana Live API can exploit the push endpoint by sending a large or streaming request body. This can lead to unbounded memory allocation, potentially causing out-of-memory conditions and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "grafana: Grafana Live: Denial of Service due to unbounded memory allocation via push endpoint",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-28376"
},
{
"category": "external",
"summary": "RHBZ#2477259",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477259"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-28376",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28376"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28376",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28376"
},
{
"category": "external",
"summary": "https://grafana.com/security/security-advisories/cve-2026-28376",
"url": "https://grafana.com/security/security-advisories/cve-2026-28376"
}
],
"release_date": "2026-05-13T19:28:26.544000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-17T21:04:02+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68778"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "grafana: Grafana Live: Denial of Service due to unbounded memory allocation via push endpoint"
},
{
"cve": "CVE-2026-28379",
"cwe": {
"id": "CWE-663",
"name": "Use of a Non-reentrant Function in a Concurrent Context"
},
"discovery_date": "2026-05-13T20:02:58.314071+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477264"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Grafana Live, where a race condition allows authenticated users with a Viewer role to trigger a server crash. By sending concurrent requests, these users can cause a fatal map access error, leading to complete service unavailability (Denial of Service). This requires a restart of the Grafana server to restore service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "grafana: Grafana Live: Denial of Service due to a race condition",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-28379"
},
{
"category": "external",
"summary": "RHBZ#2477264",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477264"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-28379",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28379"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28379",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28379"
},
{
"category": "external",
"summary": "https://grafana.com/security/security-advisories/cve-2026-28379",
"url": "https://grafana.com/security/security-advisories/cve-2026-28379"
}
],
"release_date": "2026-05-13T19:28:25.836000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-17T21:04:02+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68778"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "grafana: Grafana Live: Denial of Service due to a race condition"
},
{
"cve": "CVE-2026-28380",
"cwe": {
"id": "CWE-639",
"name": "Authorization Bypass Through User-Controlled Key"
},
"discovery_date": "2026-05-13T20:01:40.366617+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477240"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Grafana. An authenticated user with editor privileges could exploit a Broken Access Control (BAC) vulnerability in the Snapshot API. This flaw allows an editor to delete any dashboard snapshot, even those they do not have explicit read or write access to, leading to unauthorized data integrity loss.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "grafana: Grafana: Unauthorized snapshot deletion via Broken Access Control in Snapshot API",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-28380"
},
{
"category": "external",
"summary": "RHBZ#2477240",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477240"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-28380",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28380"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28380",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28380"
},
{
"category": "external",
"summary": "https://grafana.com/security/security-advisories/cve-2026-28380",
"url": "https://grafana.com/security/security-advisories/cve-2026-28380"
}
],
"release_date": "2026-05-13T19:28:32.257000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-17T21:04:02+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68778"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "grafana: Grafana: Unauthorized snapshot deletion via Broken Access Control in Snapshot API"
},
{
"cve": "CVE-2026-28383",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-13T20:02:28.935499+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477255"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Grafana. An authenticated user can exploit a vulnerability in the plugin resources endpoint by sending a request that causes unbounded memory allocation. This occurs when the system attempts to read the entire request body into memory. Successful exploitation can lead to an out-of-memory condition, resulting in a denial of service (DoS) for the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "grafana: Grafana: Denial of Service via unbounded memory allocation in plugin resources endpoint",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-28383"
},
{
"category": "external",
"summary": "RHBZ#2477255",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477255"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-28383",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28383"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28383",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28383"
},
{
"category": "external",
"summary": "https://grafana.com/security/security-advisories/cve-2026-28383",
"url": "https://grafana.com/security/security-advisories/cve-2026-28383"
}
],
"release_date": "2026-05-13T19:28:36.952000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-17T21:04:02+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68778"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "grafana: Grafana: Denial of Service via unbounded memory allocation in plugin resources endpoint"
},
{
"cve": "CVE-2026-33376",
"cwe": {
"id": "CWE-183",
"name": "Permissive List of Allowed Inputs"
},
"discovery_date": "2026-05-13T20:02:51.602978+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477262"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in Grafana\u0027s Auth Proxy IPv6 allow-list incorrectly defaults to a broad /32 subnet mask instead of a strict /128. This misconfiguration allows remote attackers to bypass access restrictions, potentially leading to unauthorized access and data manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in Grafana\u0027s Auth Proxy IPv6 allow-list defaults to an overly broad /32 mask, potentially allowing unauthorized access. This strictly affects Auth Proxy deployments using IPv6 allow-lists; other authentication methods are unaffected. This has been rated moderate since auth proxy authentication is not enabled by default on grafana shipped on RHEL.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33376"
},
{
"category": "external",
"summary": "RHBZ#2477262",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477262"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33376",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33376"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33376",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33376"
},
{
"category": "external",
"summary": "https://grafana.com/security/security-advisories/cve-2026-33376",
"url": "https://grafana.com/security/security-advisories/cve-2026-33376"
}
],
"release_date": "2026-05-13T19:28:34.473000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-17T21:04:02+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68778"
},
{
"category": "workaround",
"details": "To mitigate this issue, explicitly specify the intended IPv6 address mask\u2014typically /128 for a single host\u2014within the Grafana Auth Proxy allow-list configuration. This overrides the incorrect default /32 mask, ensuring that network access restrictions are applied strictly as intended.\nFor RHEL: Update the whitelist directive under the [auth.proxy] section in /etc/grafana/grafana.ini. For example, if ::1 is the desired address, configure it explicitly as ::1/128. A restart of the Grafana service (systemctl restart grafana-server) is required for the changes to take effect.",
"product_ids": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default"
},
{
"cve": "CVE-2026-33377",
"cwe": {
"id": "CWE-267",
"name": "Privilege Defined With Unsafe Actions"
},
"discovery_date": "2026-05-13T20:02:01.027996+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477246"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Grafana. A user with editor privileges can overwrite a dashboard not owned by them, leading to privilege escalation on that specific dashboard. This allows the editor to gain administrative control over the affected dashboard.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "grafana: Grafana: Privilege escalation via dashboard overwrite",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A privilege escalation flaw exists in Grafana, allowing an authenticated editor with write access to a dashboard to overwrite other dashboards not owned by them. This grants the editor administrative control over the targeted dashboard, potentially leading to unauthorized data manipulation or exposure within the Grafana environment.\n\nRed Hat\u0027s default deployment does not grant edit access to normal users. Hence, this is rated moderate.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33377"
},
{
"category": "external",
"summary": "RHBZ#2477246",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477246"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33377",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33377"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33377",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33377"
},
{
"category": "external",
"summary": "https://grafana.com/security/security-advisories/cve-2026-33377",
"url": "https://grafana.com/security/security-advisories/cve-2026-33377"
}
],
"release_date": "2026-05-13T19:28:28.154000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-17T21:04:02+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68778"
},
{
"category": "workaround",
"details": "Audit dashboard-level permissions to ensure that write access is granted only to users who should be able to modify each specific dashboard. Revoke per-dashboard write permissions from Editor users who do not strictly require them.",
"product_ids": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "grafana: Grafana: Privilege escalation via dashboard overwrite"
},
{
"cve": "CVE-2026-33378",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-13T20:03:17.614753+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477269"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Grafana. A remote attacker with authenticated access to a SQL datasource can exploit a vulnerability in the `$__timeGroup` macro. By sending specially crafted queries, an attacker can cause an Out of Memory (OOM) error, leading to the Grafana server crashing and resulting in a Denial of Service (DoS). This can disrupt the availability of the Grafana instance.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "grafana: Grafana: Denial of Service due to Out of Memory via $__timeGroup macro",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33378"
},
{
"category": "external",
"summary": "RHBZ#2477269",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477269"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33378",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33378"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33378",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33378"
},
{
"category": "external",
"summary": "https://grafana.com/security/security-advisories/cve-2026-33378",
"url": "https://grafana.com/security/security-advisories/cve-2026-33378"
}
],
"release_date": "2026-05-13T19:28:37.606000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-17T21:04:02+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68778"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "grafana: Grafana: Denial of Service due to Out of Memory via $__timeGroup macro"
},
{
"cve": "CVE-2026-33380",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"discovery_date": "2026-05-13T20:02:06.709919+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477248"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Grafana. An authenticated attacker can exploit a vulnerability in SQL Expressions to read arbitrary files from the Grafana server\u0027s filesystem. This information disclosure is possible only when the sqlExpressions feature toggle is enabled.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "grafana: Grafana: Information disclosure via SQL Expressions vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33380"
},
{
"category": "external",
"summary": "RHBZ#2477248",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477248"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33380",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33380"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33380",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33380"
},
{
"category": "external",
"summary": "https://grafana.com/security/security-advisories/cve-2026-33380",
"url": "https://grafana.com/security/security-advisories/cve-2026-33380"
}
],
"release_date": "2026-05-13T19:28:32.915000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-17T21:04:02+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68778"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "grafana: Grafana: Information disclosure via SQL Expressions vulnerability"
},
{
"cve": "CVE-2026-33381",
"cwe": {
"id": "CWE-272",
"name": "Least Privilege Violation"
},
"discovery_date": "2026-05-13T20:01:36.968865+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477239"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Grafana. When a user\u0027s access to mint tokens for a service account is revoked, the system may temporarily allow the user to continue minting tokens for a few seconds. This could lead to a temporary bypass of access control, potentially enabling unauthorized actions if the tokens are used before the revocation fully propagates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "grafana: Grafana: Temporary access control bypass for service account token minting",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33381"
},
{
"category": "external",
"summary": "RHBZ#2477239",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477239"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33381",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33381"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33381",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33381"
},
{
"category": "external",
"summary": "https://grafana.com/security/security-advisories/cve-2026-33381",
"url": "https://grafana.com/security/security-advisories/cve-2026-33381"
}
],
"release_date": "2026-05-13T19:28:31.559000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-17T21:04:02+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68778"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "grafana: Grafana: Temporary access control bypass for service account token minting"
},
{
"cve": "CVE-2026-81871",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-09-16T21:01:17.270123+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2535725"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenTelemetry-Go, specifically within its gRPC log exporter. This vulnerability allows a network attacker to bypass the intended private Certificate Authority (CA) pinning and mutual Transport Layer Security (TLS) configurations. The issue arises because the environment-only TLS path incorrectly uses system-trusted certificates instead of the application\u0027s configured client certificates. This bypass enables an attacker to intercept and spoof the collector connection, potentially leading to the unauthorized reading or alteration of sensitive log telemetry.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-81871"
},
{
"category": "external",
"summary": "RHBZ#2535725",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535725"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-81871",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81871"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-81871",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81871"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/commit/c65d435b43e5e6b82310e6b18dd4cdcb8ac63a0c",
"url": "https://github.com/open-telemetry/opentelemetry-go/commit/c65d435b43e5e6b82310e6b18dd4cdcb8ac63a0c"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/releases/tag/exporters/otlp/otlplog/otlploggrpc/v0.21.0",
"url": "https://github.com/open-telemetry/opentelemetry-go/releases/tag/exporters/otlp/otlplog/otlploggrpc/v0.21.0"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-w34q-cm8f-9c5x",
"url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-w34q-cm8f-9c5x"
}
],
"release_date": "2026-09-16T20:43:40.119000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-17T21:04:02+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68778"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration"
},
{
"cve": "CVE-2026-81872",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-09-16T21:01:33.849934+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2535727"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the OpenTelemetry-Go `BatchingProcessor` component. A remote attacker can exploit this by sending a high volume of log emissions, which can fill the asynchronous export buffer. This causes the processor to enter a tight CPU loop, repeatedly retrying to export logs without proper waiting mechanisms. The consequence is the exhaustion of CPU resources, leading to a degradation or denial of service (DoS) in the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "go.opentelemetry.io/otel/sdk/log: OpenTelemetry-Go: Denial of Service via attacker-driven log emission",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-81872"
},
{
"category": "external",
"summary": "RHBZ#2535727",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535727"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-81872",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81872"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-81872",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81872"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/commit/ba71b09e6ed272e93a669aeaec1e98b1df4cc582",
"url": "https://github.com/open-telemetry/opentelemetry-go/commit/ba71b09e6ed272e93a669aeaec1e98b1df4cc582"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/issues/6797",
"url": "https://github.com/open-telemetry/opentelemetry-go/issues/6797"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/pull/8620",
"url": "https://github.com/open-telemetry/opentelemetry-go/pull/8620"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/log/v0.21.0",
"url": "https://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/log/v0.21.0"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-hjf4-fphr-2h65",
"url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-hjf4-fphr-2h65"
}
],
"release_date": "2026-09-16T20:42:23.507000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-17T21:04:02+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68778"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@aarch64",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@src",
"Red Hat Hardened Images:grafana13.2-0:13.2.1-0.5.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "go.opentelemetry.io/otel/sdk/log: OpenTelemetry-Go: Denial of Service via attacker-driven log emission"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…