CVE-2026-33379

HIGH 8.5CVE-2026-33379 · Published 06/11/2026 · updated 06/11/2026

In short

CVE-2026-33379 is a HIGH (CVSS 8.5) vulnerability.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A user with any role, including Viewer or a service account with no permissions, can create, externally publish, and delete dashboard snapshots (missing authorization). Only Grafana OSS and Grafana Enterprise 12.4 are affected; earlier versions and Grafana 13 are not.

References

grafana.com/security/security-advisories/cve-2026-33379

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free