Red Hat Security Advisory

RHSA-2026:10226

grafana security update

Released 2026-04-24 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) grafana-10.2.6-20.el9_7, grafana-selinux-10.2.6-20.el9_7

TI-2026-22221 CVE-2026-27877 · GHSA-3q27-7qjq-p9c5

LOW 33

When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00314 Published 2026-03-27 Fixed in 11.6.14, 12.1.10 +4 CWE-312