Skip to contentGrafana Grafana/grafana vulnerabilities
- grafana, grafana grafana/grafana, grafana/grafana-enterprise +2 moreXSS in Grafana Explore stack traceCVE-2025-41117Fix available6.8 Medium
- grafana, grafana grafana/grafana, grafana/grafana-enterprise +2 morePublic Dashboards time range restriction on annotations can be bypassedCVE-2026-21722Fix available5.3 Medium
- grafana, grafana grafana/grafana, grafana/grafana-enterprise +12 more +14 moreDashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege EscalationCVE-2026-21721Public exploitFix available8.1 High
- grafana, grafana grafana/grafana, grafana/grafana-enterprise +5 more +7 moreUnauthenticated DoS: avatar cache leaks goroutines when /avatar/:hash requests time outCVE-2026-21720Fix available7.5 High