Red Hat Security AdvisoryRHSA-2026:85295
Red Hat Hardened Images RPMs bug fix and enhancement update
Released 2026-10-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Hardened Images grafana12.4-12.4.13-0.1.hum1@aarch64, grafana12.4-12.4.13-0.1.hum1@src, grafana12.4-12.4.13-0.1.hum1@x86_64
Fixes 3 records
Priority LOW 30
A service account with user-management permissions in one organization can read, modify, disable or delete users belonging to other organizations on the same Grafana instance through the SCIM API (insecure direct object…
CVSS 3.1MEDIUM 6.7· Network · High privileges · No interaction · EPSS 0.00338 · Published 2026-10-20 · Partial fix · 12.4.13, 13.0.11 +2 CWE-1220
Priority LOW 30
Hono is a Web application framework that provides support for any JavaScript runtime.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0031 · Published 2026-10-19 · Partial fix · 4.13.11 CWE-174
Priority LOW 28
A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity (unintended proxy).
CVSS 3.1MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.00267 · Published 2026-10-13 · Partial fix · 12.4.13, 13.0.11 +2 CWE-1220
