MEDIUM 6.3

GHSA-gxcp-jjxh-rwp4

Grafana: SQL Expressions Read File From Disk

상세

A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable.

이 버전이 영향받나요?

사용 중인 패키지 버전을 입력하면 즉시 평가합니다.

영향 패키지

Go / github.com/grafana/grafana

최초 영향 버전: 0 수정 버전: 1.9.2-0.20260513165311-fb7336fc36c1

수정 go get github.com/grafana/grafana@v1.9.2-0.20260513165311-fb7336fc36c1

참고

https://nvd.nist.gov/vuln/detail/CVE-2026-33380 [ADVISORY]
https://github.com/grafana/grafana/commit/fb7336fc36c14e1ff869482c5085ddb9f39e1b86 [WEB]
https://github.com/grafana/grafana [PACKAGE]
https://grafana.com/security/security-advisories/cve-2026-33380 [WEB]