Red Hat Security Advisory

RHSA-2026:58982

grafana security, bug fix, and enhancement update

Released 2026-08-24 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) grafana-10.2.6-23.el9_8.2, grafana-selinux-10.2.6-23.el9_8.2

Fixes 2 records

TI-2026-25775 CVE-2026-33376 · GHSA-3r2p-7499-27q3

Auth Proxy IPv6 whitelist bypass

LOW 34

When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00282 Published 2026-05-13 Partial fix · 11.6.14+security-04, 12.2.8+security-04 +3 CWE-1188

TI-2026-25776 CVE-2026-33377 · GHSA-5cv7-h7gr-wjgh

Dashboard Import Overwrites ACL — Editor Privilege Escalation to Dashboard Admin

LOW 33

An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00226 Published 2026-05-13 Partial fix · 11.6.14+security-04, 12.2.8+security-04 +3 CWE-284