Skip to content

CVE record · 1 source

CVE-2026-15577

CVSS 6.5

A user or service account with read-only access to Git Sync (provisioning) connections can modify a connection's configuration through its status…

Vendor: Grafana Labs
Product: Grafana / Loki / Tempo / Mimir
CVSS: 6.5
Exposure class: Network management

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

8

CVE NVD 20d ago

A user or service account with read-only access to Git Sync (provisioning) connections can modify a connection's configuration through its status…

A user or service account with read-only access to Git Sync (provisioning) connections can modify a connection's configuration through its status subresource (incorrect authorization). On Grafana 12.4 the affected API is only…

CVSS 6.5 CVE-2026-15577 Grafana Labs