Go/github.com/grafana/grafana CVE-2026-21724: medium 4.3, EPSS 0.27%
Grafana OSS: Authorization bypass allows users with Editor role to modify protected webhook URLs without permissions in github.com/grafana/grafana
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2026-5219
- nvd: CVE-2026-21724
- https://github.com/advisories/GHSA-7g92-g4vh-hp84
- https://github.com/grafana/grafana/commit/daffe750de85b0dbf79f206a35835cf66a83d6ca
- https://github.com/grafana/grafana/releases/tag/v12.3.6
- https://grafana.com/security/security-advisories/cve-2026-21724
CVE-2026-21724 · published · modified · JSON