CVE-2026-103506
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Oct 28, 2026
Vendor
unknown
Description
An authenticated user in Grafana can read SSO client secrets and modify instance-wide SSO settings without the required permissions (missing authorization). This affects Grafana OSS and Enterprise 13.2 installations with the experimental kubernetesSsoSettingsApi feature toggle enabled, which is disabled by default.