Firetruck

CVE-2021-39226

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Grafana contains an authentication bypass vulnerability that allows authenticated and unauthenticated users to view and delete all snapshot data, potentially resulting in complete snapshot data loss.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
grafanagrafana / grafana< 7.5.11affected
grafanagrafana / grafana>= 8.0.0, < 8.1.6affected