Database/Control plane, storage & DevOps
Grafana: alert rule marked as a server-side expression bypasses datasource query authorization
Impact
A user allowed to create or edit alert rules can mark a query as a server-side expression while still pointing it at a real datasource UID, and Grafana runs it with the configured datasource credentials without checking that the user may query that datasource. In a GPU cloud, Grafana usually holds the credentials for the fleet's Prometheus, DCGM exporter, loki and billing datastores, and datasource permissions are what keeps one team's telemetry away from another's. The result is that anyone with alert-rule edit rights reads any datasource the Grafana instance can reach. Confidentiality is rated high; the record notes limited integrity impact.
Who can reach it
Authenticated Grafana user holding permission to create or edit alert rules, over the network. No administrative role needed beyond alerting edit rights.
What to do
Apply the fixed Grafana OSS/Enterprise version named in the linked Grafana security advisory and restart the server — the record itself does not state a version number, so read the advisory before scheduling. As an interim mitigation, cut back who holds alert-rule create/edit permission in orgs and folders that reach sensitive datasources.
References
Related entries
- GitLab: unauthenticated GraphQL mutations executed via GET through multiplex query handlingCVE-2026-19650 · GitLab CE/EE (GraphQL multiplex query handling)High
- MinIO (server-side encryption / replication): An authenticated tenant can inject SSE metadata through replicationCVE-2026-34204 · MinIO (server-side encryption / replication)High
- MinIO (S3 Select): A crafted S3 Select CSV query makes MinIO allocate memory without bound until the process isCVE-2026-39414 · MinIO (S3 Select)High
- RabbitMQ: super-stream binding-keys parsed before the permission check, one PUT kills the nodeCVE-2026-67408 · RabbitMQ (rabbitmq_stream_management super-stream binding-keys handler)High
- Jenkins Ivy Report Plugin: XXE in Ivy report parsing gives an authenticated user file read on the controllerCVE-2026-70448 · Jenkins Ivy Report Plugin (XML parser for Ivy report files)High
- Determined AI (master API, generic task kill/pause/unpause handlers): The generic task kill, pause and unpauseCVE-2026-75109 · Determined AI (master API, generic task kill/pause/unpause handlers)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.