Database/Control plane, storage & DevOps
Grafana Azure Monitor data source (resource proxy): A Grafana user who only has query access to an Azure Monitor data
Impact
A Grafana user who only has query access to an Azure Monitor data source can use that data source's resource proxy to reach Azure Resource Manager APIs beyond the ones Grafana needs, using the data source's own Azure identity. The practical effect is that dashboard-viewer access becomes read access to whatever the service principal behind the data source was granted - and those identities are commonly over-scoped at subscription level because nobody expected them to be callable directly. Where Grafana is the shared dashboard for a GPU cloud, that is a broad set of people. The impact is bounded by the Azure role on that identity, and the advisory lists confidentiality impact only.
Who can reach it
Any authenticated Grafana user with query permission on an Azure Monitor data source, over the network. The vendor rates attack complexity high.
What to do
Upgrade Grafana (OSS, Enterprise and Cloud) to the versions named in the Grafana advisory and restart the server. Independently of the patch, re-scope the Azure identity behind each Azure Monitor data source down to the minimum role it needs, since that is what bounds the damage - and treat its reachable ARM data as having been exposed to every query-capable user on that instance.
References
Related entries
- Prometheus (exporter-toolkit): Poisoning the built-in auth cache bypasses basic-auth on exportersCVE-2022-46146 · Prometheus (exporter-toolkit)Medium
- GitLab: Pages logs and error-tracking events record request secrets, exposing access tokensCVE-2026-101168 · GitLab CE/EE (GitLab Pages request logging and error tracking)Medium
- OpenTelemetry eBPF Profiler: unprivileged process can stall the agent by mapping a FIFOCVE-2026-48496 · OpenTelemetry eBPF Profiler (ELF mapping file handling)Medium
- AMD TEE / ASP bootloader syscall input validation: Insufficient validation of syscall inputs in the AMD trustedCVE-2021-46759 · AMD TEE / ASP bootloader syscall input validationMedium
- HashiCorp Consul: Missing Content-Type header lets user input be reinterpretedCVE-2024-10086 · HashiCorp ConsulMedium
- SPI flash configuration (flash descriptor / protected range registers) across multiple Intel platformsCVE-2017-5703 · SPI flash configuration (flash descriptor / protected range registers) across multiple Intel platformsMedium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.