Skip to content
OpenAdvisories
High 1 exploited CVE RLSA-2021:3771 1 CVE

Important: grafana security update

Published Oct 12, 2021 · Updated Feb 4, 2026

Ecosystem: Rocky Linux

Summary

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.

Security Fix(es):

* grafana: Snapshot authentication bypass (CVE-2021-39226)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 8 grafana 0:7.3.6-3.el8_4

Vulnerabilities 1

  • Critical 9.8
    CVE-2021-39226 Exploited Scanner template EPSS 100%

    Snapshot authentication bypass in grafana

    Grafana is an open source data visualization platform. In affected versions unauthenticated and authenticated users are able to view the snapshot with the lowest database key by accessing the literal paths: /dashboard/snapshot/:key, or /api/snapshots/:key. If…

    Grafana Grafana grafana github.com/grafana/grafana Web / CMS Ubuntu Go
    KEV Aug 25, 2022

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2011063