The Alertmanager in Grafana Enterprise Metrics before 1.2.1 and Metrics Enterprise 1.2.1…
Priority LOW 25Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
The Alertmanager in Grafana Enterprise Metrics before 1.2.1 and Metrics Enterprise 1.2.1 has a local file disclosure vulnerability when experimental.alertmanager.enable-api is used. The HTTP basic auth password_file can be used as an attack vector to send any file content via a webhook. The alertmanager templates can be used as an attack vector to send any file content because the alertmanager can load any text file specified in the templates list.
Why it matters now
EPSS 0.00277 20th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-31231
- 2026-10-03 Alias added: GHSA-rm28-h995-22q5
References
Advisory 5
- https://grafana.com/docs/metrics-enterprise/
- https://community.grafana.com/c/security-announcements
- https://grafana.com/docs/metrics-enterprise/latest/downloads/#v113----april-27-2021
- https://grafana.com/docs/metrics-enterprise/latest/downloads/#v121----april-27-2021
- https://security.netapp.com/advisory/ntap-20210611-0001/
More Grafana Enterprise Metrics vulnerabilities
- TI-2022-21960 Access policy with access to all tenants and using label selectors has more access CVSS 3.1HIGH 8.8
Sources
- CVE-2021-31231 · CVE Program
- CVE-2021-31231 · NVD
- FIRST EPSS
- GHSA-rm28-h995-22q5 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences