Red Hat Security AdvisoryRHSA-2026:89732
grafana security update
Released 2026-10-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) grafana-10.2.6-28.el10_2.9, grafana-selinux-10.2.6-28.el10_2.9
Fixes 2 records
Priority MEDIUM 40
Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00706 · Published 2026-10-08 · Partial fix · 1.26.9, 1.27.2 CWE-770
Priority LOW 31
An authenticated user with permission to create or edit alert rules can bypass datasource query authorization by marking an alert rule query as a server-side expression while referencing a real datasource UID (incorrect…
CVSS 3.1HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00285 · Published 2026-08-19 · Partial fix · 12.3.11, 12.4.9 +2 CWE-863
