Grafana Image Renderer: unvalidated filePath on /render/csv writes a shared object that Chromium then loads

Impact

The /render/csv endpoint does not validate filePath, so a caller can write a shared object to an arbitrary location which the renderer's Chromium process then loads - arbitrary file write escalating to code execution as the renderer service. Exploitation needs only that the default authToken is unchanged or known and that the attacker can reach the renderer endpoint, and the renderer is routinely deployed as a sidecar or internal service that nobody treats as attack surface. On a fleet this lands inside the observability plane, which by design can reach every monitored node and often holds datasource credentials for the whole cluster, so the scope change in the vector (S:C) is real rather than theoretical. Affects grafana-image-renderer 1.0.0 through 4.0.16.

Who can reach it

Anyone with network reach to the image renderer endpoint who knows the authToken - which on default installs is the published default value. Typically that is anyone on the internal monitoring network; no Grafana user account needed.

What to do

Upgrade grafana-image-renderer to 4.0.17 and restart the renderer - a container or service restart, no node drain. Also change authToken away from the default and keep the renderer bound to the Grafana backend only, not to a general internal network; both are config changes plus a restart.

References

Related entries

• Redis: "RediShell" - authenticated user crafts a Lua script to trigger a use-after-freeCVE-2025-49844 · RedisCritical
• Logging operator: unescaped Flow CRD values inject Fluentd directives and run commands in the aggregatorCVE-2026-54680 · Logging operator (Fluentd config renderer, pkg/sdk/logging/model/render/fluent.go)Critical
• Prowler: legacy gcp auth-provider in kubeconfig runs commands on the shared scan workerCVE-2026-73263 · Prowler API (Kubernetes provider connection test, kubeconfig exec-auth validation)Critical
• Ansible automation-controller: copied workflows keep instance groups, letting a tenant run jobs on the control planeCVE-2026-84719 · Red Hat Ansible Automation Platform automation-controller (workflow deep-copy permission sanitizer)Critical
• GitLab EE: Duo Chat GraphQL subscription leaks Advanced Search config and credentialsCVE-2026-87719 · GitLab EE (Duo Chat GraphQL subscription argument handling)Critical
• GitLab CE/EE: double free parsing a crafted CI/CD regular expression gives code execution on the serverCVE-2026-89078 · GitLab CE/EE (CI/CD config regular-expression parser)Critical