Go/github.com/grafana/grafana CVE-2025-41115: critical 9.8, EPSS 17.50%
Grafana Incorrect Privilege Assignment vulnerability in github.com/grafana/grafana
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.9.2-0.20250310110405-e6fdb746f235 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2025-4153
- nvd: CVE-2025-41115
- https://github.com/advisories/GHSA-w62r-7c53-fmc5
- https://github.com/grafana/grafana/commit/ca5d89812015ef2db3acc62826f73650450b331e
- https://github.com/grafana/grafana/releases/tag/v12.0.7
- https://github.com/grafana/grafana/releases/tag/v12.1.4
- https://github.com/grafana/grafana/releases/tag/v12.2.2
- https://github.com/grafana/grafana/releases/tag/v12.3.0
CVE-2025-41115 · published · modified · JSON