grafana security advisories
8 threat alerts tracking vulnerabilities and security advisories that affect grafana products.
Vulnios monitors grafana CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent grafana security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2026-27876 — grafana — grafana
A chained attack via SQL Expressions and a Grafana Enterprise plugin can lead to a remote arbitrary code execution impact (RCE). This is enabled by a feature in Grafana (OSS), so all users are always
criticalCVE-2026-27876Critical Vulnerability: CVE-2024-9264 — grafana — grafana
The SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` queries containing user input. These queries are insufficiently sanitized before being passed to `duckdb`, lea
criticalCVE-2024-9264Critical Vulnerability: CVE-2025-41115 — grafana — grafana
SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage users and teams in Grafana by introducing automated user lifecycle management. In
criticalCVE-2025-41115Critical Vulnerability: CVE-2025-41118 — grafana — pyroscope
Pyroscope is an open-source continuous profiling database. The database supports various storage backends, including Tencent Cloud Object Storage (COS). If the database is configured to use Tencent C
criticalCVE-2025-41118Critical Vulnerability: CVE-2026-28381 — grafana — snowflake
The Snowflake datasource allows for GET/PUT commands, which can allow any user with access to run queries against the data source to read/write files between the local grafana server and the connected
criticalCVE-2026-28381Critical Vulnerability: CVE-2021-41244 — grafana — grafana
Grafana is an open-source platform for monitoring and observability. In affected versions when the fine-grained access control beta feature is enabled and there is more than one organization in the Gr
criticalCVE-2021-41244Critical Vulnerability: CVE-2020-27846 — grafana, saml_project — grafana, saml
A signature verification vulnerability exists in crewjam/saml. This flaw allows an attacker to bypass SAML Authentication. The highest threat from this vulnerability is to confidentiality, integrity,
criticalCVE-2020-27846Critical Vulnerability: CVE-2018-15727 — grafana, redhat — grafana, ceph_storage
Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid "remember me" cookie knowing only a username of an LDAP or OAuth user.
criticalCVE-2018-15727
Track grafana exposure across your environment
Vulnios automatically cross-references your asset inventory against new grafana CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan