{"action":"Upgrade github.com/grafana/grafana to 1.9.2-0.20251106142618-ca5d89812015 or later.","affected":[{"fixed":"12.0.7","introduced":"12.0.0"},{"fixed":"12.1.4","introduced":"12.1.0"},{"fixed":"12.2.2","introduced":"12.2.0"},{"fixed":"1.9.2-0.20251106142618-ca5d89812015","introduced":"1.9.2-0.20250310110405-e6fdb746f235"}],"component":"github.com/grafana/grafana","cve_ids":["CVE-2025-41115"],"ecosystem":"Go","epss":0.17498,"exploited":false,"fixed_versions":["12.0.7","12.1.4","12.2.2","1.9.2-0.20251106142618-ca5d89812015"],"ghsa_id":"GHSA-w62r-7c53-fmc5","id":"tcs_01M5KFQ8F18R30S7VH7DV72ZH3","modified_at":"2026-09-10T03:50:31.172275434Z","published_at":"2025-11-21T15:31:28Z","references":["https://osv.dev/vulnerability/GHSA-w62r-7c53-fmc5","https://nvd.nist.gov/vuln/detail/CVE-2025-41115","https://github.com/grafana/grafana/commit/ca5d89812015ef2db3acc62826f73650450b331e","https://github.com/advisories/GHSA-w62r-7c53-fmc5","https://github.com/grafana/grafana","https://github.com/grafana/grafana/releases/tag/v12.0.7","https://github.com/grafana/grafana/releases/tag/v12.1.4","https://github.com/grafana/grafana/releases/tag/v12.2.2","https://github.com/grafana/grafana/releases/tag/v12.3.0","https://grafana.com/security/security-advisories/CVE-2025-41115"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-w62r-7c53-fmc5","url":"https://osv.dev/vulnerability/GHSA-w62r-7c53-fmc5"}],"summary":"Grafana Incorrect Privilege Assignment vulnerability"}