CVE-2026-33379
HIGH
NVD
CVSS Score
8.5
Severity
HIGH
Published
Nov 06, 2026
Vendor
unknown
Description
A user with any role, including Viewer or a service account with no permissions, can create, externally publish, and delete dashboard snapshots (missing authorization). Only Grafana OSS and Grafana Enterprise 12.4 are affected; earlier versions and Grafana 13 are not.