tocsin

CVE-2025-41115

2 advisories.

Go/github.com/grafana/grafana CVE-2025-41115: critical 10, EPSS 17.50%

Grafana Incorrect Privilege Assignment vulnerability

Action: Upgrade github.com/grafana/grafana to 1.9.2-0.20251106142618-ca5d89812015 or later.

go get github.com/grafana/grafana@v12.0.7
go get github.com/grafana/grafana@v12.1.4
go get github.com/grafana/grafana@v12.2.2
go get github.com/grafana/grafana@v1.9.2-0.20251106142618-ca5d89812015

Affected

introducedfixedlast affected
12.0.012.0.7-
12.1.012.1.4-
12.2.012.2.2-
1.9.2-0.20250310110405-e6fdb746f2351.9.2-0.20251106142618-ca5d89812015-

Fixed versions

12.0.712.1.412.2.21.9.2-0.20251106142618-ca5d89812015

Sources

CVE-2025-41115 · published · modified · JSON

Go/github.com/grafana/grafana CVE-2025-41115: unknown, EPSS 17.50%

Grafana Incorrect Privilege Assignment vulnerability in github.com/grafana/grafana

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
1.9.2-0.20250310110405-e6fdb746f235--

Fixed versions

No fixed version in the source.

Sources

CVE-2025-41115 · published · modified · JSON