Go/github.com/grafana/grafana CVE-2025-3260: high 8.3, EPSS 0.56%
Grafana vulnerable to authenticated users bypassing dashboard, folder permissions in github.com/grafana/grafana
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-20250114093457-36d6fad421fb | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2025-3740
- nvd: CVE-2025-3260
- https://github.com/advisories/GHSA-3px7-c4j3-576r
- https://github.com/grafana/grafana/blob/be8d153dc33734caba4f617ff571d18253e68fa0/CHANGELOG.md#1161-2025-04-23
- https://grafana.com/blog/2025/04/22/grafana-security-release-medium-and-high-severity-fixes-for-cve-2025-3260-cve-2025-2703-cve-2025-3454
CVE-2025-3260 · published · modified · JSON