Grafana: authenticated user can read SSO client secrets and change instance-wide SSO settings

Impact

Any authenticated Grafana user on an affected 13.2 instance can read the OAuth/SAML client secrets configured for the instance and rewrite instance-wide SSO settings without holding the permissions that should gate them. On a GPU fleet Grafana is usually the dashboard everyone gets - tenants, on-call, sometimes customers - and it is wired to the same identity provider as the cluster control plane, so a leaked client secret is reusable against systems well beyond metrics. Rewriting SSO settings lets the attacker redirect authentication at a provider they control and admit themselves as an admin on the next login. The record scopes this to installations that have the experimental kubernetesSsoSettingsApi feature toggle enabled; it is off by default.

Who can reach it

Any user who can authenticate to the Grafana instance - no admin role and no special permission needed. Only instances running 13.2 OSS or Enterprise with the experimental kubernetesSsoSettingsApi toggle switched on are affected.

What to do

Check whether kubernetesSsoSettingsApi is enabled; if it is not, you are not exposed and nothing is required. If it is, the cheapest immediate mitigation is to turn the toggle off and restart Grafana, which is a single daemon restart with no effect on GPU nodes. Then upgrade to the fixed 13.2 release named in the Grafana advisory. Treat any SSO client secret that was readable as burned and rotate it at the identity provider, plus review SSO settings for unauthorized changes.

References

Related entries

• NetBird client: unescaped peer hostname injects OpenSSH config directives and runs commands on other peersCVE-2026-105429 · NetBird client SSH config manager (/etc/ssh/ssh_config.d/99-netbird.conf generation)High
• terraform-mcp-server: knowing another user's MCP session ID runs tool calls with their Terraform credentialsCVE-2026-16496 · HashiCorp terraform-mcp-server (streamable-HTTP stateful transport)High
• Ceph CephX (authentication protocol): A tenant holding one low-privilege CephX client key ends up with cluster-wideNCVD-2025-016-ceph-cephx-authentication-protoc · Ceph CephX (authentication protocol)High
• GlusterFS (brick, server-rpc-fops.c): Multiple stack buffer overflows from fixed-size alloca() allocations in the brickCVE-2018-10907 · GlusterFS (brick, server-rpc-fops.c)High
• GlusterFS (brick, gfs3_symlink_req): Symlink creation is not confined to the volume, so a client plants a link pointingCVE-2018-10928 · GlusterFS (brick, gfs3_symlink_req)High
• NetApp Clustered Data ONTAP export policy enforcement (SMBv2/SMBv3): Export policy rules marked read-only are notCVE-2018-5490 · NetApp Clustered Data ONTAP export policy enforcement (SMBv2/SMBv3)High