ALSA-2026:83544
Important: grafana security update
Published Oct 15, 2026 · updated Oct 15, 2026
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: PLUGIN ARCHIVE EXTRACTION ESCAPES THE PLUGIN DIRECTORY, ALLOWING CODE EXECUTION (CVE-2026-15815) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 15, 2026 · OSV.dev
Detected
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: PLUGIN ARCHIVE EXTRACTION ESCAPES THE PLUGIN DIRECTORY, ALLOWING CODE EXECUTION (CVE-2026-15815) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in
Oct 15, 2026 · OSV.dev
Fix available
grafana fixed in 9.2.10-35.el8_10; grafana-selinux fixed in 9.2.10-35.el8_10
Oct 15, 2026 · OSV.dev
Fix available
grafana fixed in 9.2.10-35.el8_10
Oct 15, 2026 · OSV.dev
Fix available
grafana-selinux fixed in 9.2.10-35.el8_10
Oct 15, 2026 · OSV.dev
Updated
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: PLUGIN ARCHIVE EXTRACTION ESCAPES THE PLUGIN DIRECTORY, ALLOWING CODE EXECUTION (CVE-2026-15815) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in
Affected
- AlmaLinux:8 grafana0 → 9.2.10-35.el8_10
- AlmaLinux:8 grafana-selinux0 → 9.2.10-35.el8_10