Grafana Snowflake datasource: query access allows reading and writing files on the Grafana server

Impact

The Snowflake datasource permits Snowflake GET and PUT commands, which move files between the Grafana server's local filesystem and the Snowflake host. Any user allowed to run queries against that datasource therefore gets file read and file write on the Grafana server, not just data access - the record puts confidentiality and integrity at high. On a fleet where Grafana is the shared observability pane for GPU clusters, its server-side filesystem holds provisioning files and datasource credentials for everything else it scrapes, so a read-only dashboard user can reach secrets for unrelated systems. Exploitation requires the Snowflake datasource to be configured; operators without it are unaffected.

Who can reach it

Any authenticated Grafana user with permission to run queries against a configured Snowflake datasource. No administrative role needed.

What to do

Apply the Grafana advisory for the Snowflake datasource plugin and restart Grafana; the record does not state a fixed version, so take it from the advisory. Meanwhile restrict who holds query permission on that datasource, or remove it if unused, and rotate any credentials stored on the Grafana host that a file read would have exposed. Patching is a plugin update plus a service restart - no node maintenance.

References

Related entries

• Apache Airflow: any authenticated task instance can read or decide another task instance's HITL approvalsCVE-2026-30911 · Apache Airflow Execution API (Human-in-the-Loop endpoints)High
• Airflow Google provider: GCS object names with .. segments write outside the destination pathCVE-2026-49297 · Apache Airflow Google provider (GCSToSFTPOperator, GCSTimeSpanFileTransformOperator path handling)High
• OpenStack glance_store: VMware datastore driver sends authentication headers to an attacker-supplied image location hostCVE-2026-51773 · OpenStack glance_store (VMware datastore driver, _retry_request)High
• Ceph RGW: unsigned x-amz-* headers on presigned URLs are honored, letting a URL holder escalate privilegesCVE-2026-54330 · Ceph Object Gateway (RGW SigV4 presigned-URL header validation)High
• Apache Airflow Git provider: SSH host-key verification disabled by default when cloning DAG bundlesCVE-2026-58065 · Apache Airflow Git provider (apache-airflow-providers-git, git-over-SSH host key checking)High
• Apache Airflow FAB provider: a DAG named 'DAGs' collides with the global all-DAGs permission and escalates privilegesCVE-2026-59245 · Apache Airflow FAB auth manager (apache-airflow-providers-fab, resource_name collision)High