Grafana Labs vulnerabilities
3 vulnerabilities
Known vulnerabilities in Grafana Labs products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 4 products.
Products
4- Grafana Databricks Datasource Plugin1 vulnerabilities
- Grafana OSS And Enterprise1 vulnerabilities
- Grafana Snowflake Datasource Plugin1 vulnerabilities
- Grafana0 vulnerabilities
RoutineCVE-2025-41116grafana labs · grafana databricks datasource pluginIncorrect oauth passthrough in Grafana Databricks DatasourceWhen using the Grafana Databricks Datasource Plugin,
if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in
the wrong user identifier being used, and information for which the viewer is not authorized being returned.
This issue affects Grafana Databricks Datasource Plugin: from 1.6.0 before 1.12.0CVSS2.1LowEPSS0.29%RoutineCVE-2025-3717grafana labs · grafana snowflake datasource pluginIncorrect oauth passthrough in Grafana Snowflake DatasourceWhen using the Grafana Snowflake Datasource Plugin,
if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in
the wrong user identifier being used, and information for which the viewer is not authorized being returned.
This issue affects Grafana Snowflake Datasource Plugin: from 1.5.0 before 1.14.1.CVSS2.1LowEPSS0.29%RoutineCVE-2024-9476grafana labs · grafana oss and enterprise +2 morePrivilege escalation vulnerability for Organizations in GrafanaA vulnerability in Grafana Labs Grafana OSS and Enterprise allows Privilege Escalation allows users to gain access to resources from other organizations within the same Grafana instance via the Grafana Cloud Migration Assistant.This vulnerability will only affect users who utilize the Organizations feature to isolate resources on their Grafana instance.CVSS5.1MediumEPSS0.21%