CVE-2026-33381

Go/github.com/grafana/grafana CVE-2026-33381: medium 5.9, EPSS 0.33%

Grafana: Users can generate Service Account tokens after permissions removal

Action: Upgrade github.com/grafana/grafana to 1.9.2-0.20260513165311-fb7336fc36c1 or later.

go get github.com/grafana/grafana@v1.9.2-0.20260513165311-fb7336fc36c1

Affected

Fixed versions

Sources

• osv: GHSA-wfhv-mj62-f5xh
• https://nvd.nist.gov/vuln/detail/CVE-2026-33381
• https://github.com/grafana/grafana/commit/fb7336fc36c14e1ff869482c5085ddb9f39e1b86
• https://github.com/grafana/grafana
• https://grafana.com/security/security-advisories/cve-2026-33381

CVE-2026-33381 · published 2026-05-13T21:32:06Z · modified 2026-09-10T03:50:47.864721231Z · JSON

Go/github.com/grafana/grafana CVE-2026-33381: unknown, EPSS 0.33%

Grafana: Users can generate Service Account tokens after permissions removal in github.com/grafana/grafana

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-5708
• https://github.com/advisories/GHSA-wfhv-mj62-f5xh
• https://nvd.nist.gov/vuln/detail/CVE-2026-33381
• https://github.com/grafana/grafana/commit/fb7336fc36c14e1ff869482c5085ddb9f39e1b86
• https://grafana.com/security/security-advisories/cve-2026-33381

CVE-2026-33381 · published 2026-06-25T22:34:38Z · modified 2026-06-26T15:44:23.368107427Z · JSON