Grafana security vulnerabilities
Open-source infrastructure. Public CVE monitoring for Grafana. Vendor security advisories are linked on this page.
Built for Operators of this product.
67 public records · 0 security-fix timeline events. 6 published in the last 7 days. 37 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 0
- High 10
- Medium 6
- Low 0
2026-08-0316 issues2026-10-31
Known exploited
View all known exploited- High7.5Grafana Snapshot Feature Remote API Denial of ServicePatch nowKEVEPSS 83.04%Mar 18, 2021
- Medium6.1Grafana Labs Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 97.08%May 22, 2025
- High7.5Grafana Path Traversal VulnerabilityPatch nowKEVEPSS 88.50%Dec 7, 2021
- High7.3Grafana Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.93%Oct 5, 2021
Recently published
Browse catalog- High8.9SSO settings authorization bypassCheck if you run itEPSS 0.27%Oct 28, 2026
- Medium6.5Server-side expression parser denial of serviceCheck if you run itEPSS 0.34%Oct 28, 2026
- High7.7Alerting contact point authorization bypass via schema downgradeCheck if you run itEPSS 0.29%Oct 28, 2026
- High7.5Important: grafana-pcp security updateOpen the advisoryOct 23, 2026
- High7.5Red Hat Security Advisory: Red Hat Hardened Images RPMs Security UpdateOpen the advisoryOct 20, 2026
- Medium5.3Red Hat Security Advisory: Red Hat Hardened Images RPMs Security UpdateOpen the advisoryOct 18, 2026
- Medium5.3Red Hat Security Advisory: Red Hat Hardened Images RPMs Security UpdateOpen the advisoryOct 18, 2026
- Medium5.3Red Hat Security Advisory: Red Hat Hardened Images RPMs Security UpdateOpen the advisoryOct 18, 2026
- High7.1Grafana's data source proxy did not apply role-based access control to write requests forwarded to Loki data sources.Check if you run itEPSS 0.19%Oct 15, 2026
- High7.5Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement updateOpen the advisoryOct 10, 2026