CVEs published by Grafana Labs

CVEs published by Grafana Labs (CVE Numbering Authority). 4 tracked.

CVE-2026-15583 HIGH 8.6 A confused-deputy flaw in Grafana MCP Server allows an unauthenticated remote attacker to exfiltrate the serve
CVE-2026-21729 HIGH 7.5 Loki queries with large limits can cause large memory allocations which can impact the availability of the ser
CVE-2026-9765 HIGH 7.1 Note: The CVE and blog post don't exist because we determined this is actually a cloud-only issue. Access Con
CVE-2026-21723 MEDIUM 5.3 The alertmanager templates test endpoint (/api/alertmanager/grafana/config/api/v1/templates/test) can execute