CVE record · 1 source
CVE-2026-92539
CVSS 6.7A service account with user-management permissions in one organization can read, modify, disable or delete users belonging to other organizations on…
- Vendor
- Grafana Labs
- Product
- Grafana / Loki / Tempo / Mimir
- CVSS
- 6.7
- Exposure class
- Network management
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
A service account with user-management permissions in one organization can read, modify, disable or delete users belonging to other organizations on…
A service account with user-management permissions in one organization can read, modify, disable or delete users belonging to other organizations on the same Grafana instance through the SCIM API (insecure direct object…