Skip to content

CVE record · 1 source

CVE-2026-79656

CVSS 6.0

A user with read access to Grafana's server logs, or to a log store they are shipped to, can recover the OAuth and OIDC access, refresh and ID tokens…

Vendor: Grafana Labs
Product: Grafana OSS, Grafana Enterprise
CVSS v3.1: 6.0 AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Weakness: CWE-532
Exposure class: Developer platform, Network management

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

10

CVE NVD 5d ago

A user with read access to Grafana's server logs, or to a log store they are shipped to, can recover the OAuth and OIDC access, refresh and ID tokens…

A user with read access to Grafana's server logs, or to a log store they are shipped to, can recover the OAuth and OIDC access, refresh and ID tokens of users who sign in through the Generic OAuth, Google or GitLab providers.…

CVSS 6.0 CVE-2026-79656 Grafana Labs