Read the docs

Grafana

Records175All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical16CVSS 9.0–10.0
CVSS high67CVSS 7.0–8.9

Exploited now

Grafana records in CISA KEV
TI-2021-19604 Grafana Path Traversal Vulnerability Priority CRITICAL 90KEV 2025-10-09TI-2021-16611 Grafana Authentication Bypass Vulnerability Priority CRITICAL 100KEV 2022-08-25

Components

Products in the NVD configurations · select one to filter the records
Grafana 104 records CRITICAL Tempo 3 records MEDIUM Agent 2 records LOW Enterprise Metrics 2 records LOW Loki 2 records LOW Piechart-panel 2 records LOW Alloy 1 record LOW Google Sheets 1 record LOW

Records

2 records in Agent · all components

TI-2024-08354 CVE-2024-8996 · GHSA-m5gv-m5f9-wgv4

Grafana Agent Flow on Windows Unquoted service path

Priority LOW 36

Unquoted Search Path or Element vulnerability in Grafana Agent (Flow mode) on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Agent Flow: before 0.43.2

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00264 Published 2024-09-25 Fixed in 0.43.2, 0.43.3 CWE-428
TI-2021-17932 CVE-2021-41090 · GHSA-9c4x-5hgq-q3wh

Instance config inline secret exposure

Priority LOW 34

Grafana Agent is a telemetry collector for sending metrics, logs, and trace data to the opinionated Grafana observability stack.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0076 Published 2021-12-08 Fixed in 0.20.1, 0.21.2 CWE-200
Open these records in search →