7.7
HighCVSS 3.1 · from GRAFANA
CVE-2026-100105
Alerting contact point authorization bypass via schema downgrade
Grafana Enterprise · Incorrect authorization · CWE-863AffectedGrafana Enterprise, Grafana OSS
FixNo fix listed yet.
PublishedOct 28, 16:48 · GRAFANA
ScoredOct 28 · 7.7 · GRAFANA
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:09 UTC
What we know
No known exploitation. CISA KEV, checked 22:09 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
An attacker needs network access and an account. CVSS: network, low privileges.
A successful attack can read data. CVSS impact.
Description
A user with permission to edit contact points but not their protected fields can change protected settings, such as a contact point's destination URL, by switching an integration to a legacy schema version, which can expose stored credentials and redirect alert notifications (incorrect authorization).
From GRAFANA
Affected and fixed versions
ProductAffectedFixed inGrafana Enterprise12.4.0 – 12.4.13–Grafana Enterprise13.0.0 – 13.0.11–Grafana Enterprise13.1.0 – 13.1.8–Grafana Enterprise13.2.0 – 13.2.4–Grafana OSS12.4.0 – 12.4.13–Grafana OSS13.0.0 – 13.0.11–Grafana OSS13.1.0 – 13.1.8–Grafana OSS13.2.0 – 13.2.4–
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known