tocsin

CVE-2026-11769

6 advisories.

Go/github.com/grafana/grafana-operator/v5 CVE-2026-11769: medium

Grafana Operator: Privilege escalation from namespace admin to cluster admin via GrafanaDashboard jsonnetLib fileName

Action: Upgrade github.com/grafana/grafana-operator/v5 to 5.24.0 or later.

go get github.com/grafana/grafana-operator/v5@v5.24.0

Affected

introducedfixedlast affected
05.24.0-

Fixed versions

5.24.0

Sources

CVE-2026-11769 · published · modified · JSON

Go/github.com/grafana/grafana-operator CVE-2026-11769: medium

Grafana Operator: Privilege escalation from namespace admin to cluster admin via GrafanaDashboard jsonnetLib fileName

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-2.0.0

Fixed versions

No fixed version in the source.

Sources

CVE-2026-11769 · published · modified · JSON

Go/github.com/grafana/grafana-operator CVE-2026-11769: unknown

Grafana Operator: Privilege escalation from namespace admin to cluster admin via GrafanaDashboard jsonnetLib fileName in github.com/grafana/grafana-operator

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2026-11769 · published · modified · JSON

Go/github.com/grafana/grafana-operator/v3 CVE-2026-11769: unknown

Grafana Operator: Privilege escalation from namespace admin to cluster admin via GrafanaDashboard jsonnetLib fileName in github.com/grafana/grafana-operator

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2026-11769 · published · modified · JSON

Go/github.com/grafana/grafana-operator/v4 CVE-2026-11769: unknown

Grafana Operator: Privilege escalation from namespace admin to cluster admin via GrafanaDashboard jsonnetLib fileName in github.com/grafana/grafana-operator

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2026-11769 · published · modified · JSON

Go/github.com/grafana/grafana-operator/v5 CVE-2026-11769: unknown

Grafana Operator: Privilege escalation from namespace admin to cluster admin via GrafanaDashboard jsonnetLib fileName in github.com/grafana/grafana-operator

Action: Upgrade github.com/grafana/grafana-operator/v5 to 5.24.0 or later.

go get github.com/grafana/grafana-operator/v5@v5.24.0

Affected

introducedfixedlast affected
05.24.0-

Fixed versions

5.24.0

Sources

CVE-2026-11769 · published · modified · JSON