CVE-2026-17183

Full vulnerability record from the local CVENow database.

Description

An authenticated user with permission to create or edit alert rules can bypass datasource query authorization by marking an alert rule query as a server-side expression while referencing a real datasource UID (incorrect authorization). This can expose data accessible through Grafana's configured datasource credentials to users who lack permission to query that datasource.

Severity

HIGH

CVSS score

7.1 (v3.1)

Vulnerability status

Awaiting Analysis

Source identifier

[email protected]

Published

2026-08-19 18:16:35.940000

Last modified

2026-10-26 11:10:00.157000

View original CVE JSON

{
  "id": "CVE-2026-17183",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-19T18:16:35.940",
  "lastModified": "2026-10-26T11:10:00.157",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An authenticated user with permission to create or edit alert rules can bypass datasource query authorization by marking an alert rule query as a server-side expression while referencing a real datasource UID (incorrect authorization). This can expose data accessible through Grafana's configured datasource credentials to users who lack permission to query that datasource."
    },
    {
      "lang": "es",
      "value": "Un usuario autenticado con permiso para crear o editar reglas de alerta puede eludir la autorización de consulta de la fuente de datos al marcar una consulta de regla de alerta como una expresión del lado del servidor mientras hace referencia a un UID de fuente de datos real (autorización incorrecta). Esto puede exponer datos accesibles a través de las credenciales de la fuente de datos configuradas de Grafana a usuarios que carecen de permiso para consultar esa fuente de datos."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Grafana",
          "product": "Grafana OSS",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "8.4.0",
              "lessThan": "12.3.11",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "12.4.0",
              "lessThan": "12.4.9",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "13.0.0",
              "lessThan": "13.0.7",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "13.1.0",
              "lessThan": "13.1.4",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Grafana",
          "product": "Grafana Enterprise",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "8.4.0",
              "lessThan": "12.3.11",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "12.4.0",
              "lessThan": "12.4.9",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "13.0.0",
              "lessThan": "13.0.7",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "13.1.0",
              "lessThan": "13.1.4",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
          "baseScore": 7.1,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 4.2
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-19T18:40:28.206524Z",
          "id": "CVE-2026-17183",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-863"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://grafana.com/security/security-advisories/cve-2026-17183",
      "source": "[email protected]"
    }
  ]
}