grafana security advisories
2 threat alerts tracking vulnerabilities and security advisories that affect grafana products.
Vulnios monitors grafana CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent grafana security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2024-9264 — grafana — grafana
The SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` queries containing user input. These queries are insufficiently sanitized before being passed to `duckdb`, lea
criticalCVE-2024-9264Critical Vulnerability: CVE-2026-27876 — grafana — grafana
A chained attack via SQL Expressions and a Grafana Enterprise plugin can lead to a remote arbitrary code execution impact (RCE). This is enabled by a feature in Grafana (OSS), so all users are always
criticalCVE-2026-27876
Track grafana exposure across your environment
Vulnios automatically cross-references your asset inventory against new grafana CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan