CVE record · 1 source
CVE-2026-81938
CVSS 7.7Grafana Mimir's Alertmanager rejects tenant-supplied receiver configurations that reference local files, but the check did not cover two HTTP client…
- Vendor
- Grafana Labs
- Product
- Enterprise Metrics (GEM), Grafana Mimir
- CVSS v3.1
- 7.7 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
- Weakness
- CWE-22
- Exposure class
- Network management
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Grafana Mimir's Alertmanager rejects tenant-supplied receiver configurations that reference local files, but the check did not cover two HTTP client…
Grafana Mimir's Alertmanager rejects tenant-supplied receiver configurations that reference local files, but the check did not cover two HTTP client settings: http_headers.<name>.files and basic_auth.username_file. A tenant…