An authorization bypass vulnerability in Grafana through 13.2.0 allows an Editor-role user to delete protected contact points (receivers) without… (CVE-2026-72585)
CVE-2026-72585 is an authorization bypass vulnerability in Grafana versions through 13.2.0. It allows users with Editor role privileges to delete protected contact points (receivers) without having the required alert.notifications.receivers.protected:write permission. This flaw impacts the integrity of alert notification configurations by permitting unauthorized deletions.
AI Analysis
Technical Summary
This vulnerability in Grafana up to version 13.2.0 enables an Editor-role user to bypass authorization controls and delete protected contact points (receivers) without the necessary permission alert.notifications.receivers.protected:write. The issue is classified under CWE-284 (Improper Access Control) and has a CVSS 3.1 base score of 6.5, indicating a moderate severity. The attack vector is network-based with low attack complexity and requires privileges equivalent to an Editor role. There is no indication of confidentiality or availability impact, but the integrity of alert notification configurations can be compromised.
Potential Impact
An attacker with Editor role privileges can delete protected contact points without proper authorization, potentially disrupting alert notification mechanisms. This impacts the integrity of the system's alerting configuration but does not affect confidentiality or availability directly.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict Editor role permissions carefully and monitor for unauthorized configuration changes related to alert notifications.
An authorization bypass vulnerability in Grafana through 13.2.0 allows an Editor-role user to delete protected contact points (receivers) without… (CVE-2026-72585)
Description
CVE-2026-72585 is an authorization bypass vulnerability in Grafana versions through 13.2.0. It allows users with Editor role privileges to delete protected contact points (receivers) without having the required alert.notifications.receivers.protected:write permission. This flaw impacts the integrity of alert notification configurations by permitting unauthorized deletions.
CVSS v3.1
Score 6.5medium
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in Grafana up to version 13.2.0 enables an Editor-role user to bypass authorization controls and delete protected contact points (receivers) without the necessary permission alert.notifications.receivers.protected:write. The issue is classified under CWE-284 (Improper Access Control) and has a CVSS 3.1 base score of 6.5, indicating a moderate severity. The attack vector is network-based with low attack complexity and requires privileges equivalent to an Editor role. There is no indication of confidentiality or availability impact, but the integrity of alert notification configurations can be compromised.
Potential Impact
An attacker with Editor role privileges can delete protected contact points without proper authorization, potentially disrupting alert notification mechanisms. This impacts the integrity of the system's alerting configuration but does not affect confidentiality or availability directly.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict Editor role permissions carefully and monitor for unauthorized configuration changes related to alert notifications.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-69w7-2qcg-cvr7
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-72585"]
- Ecosystems
- []
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Threat ID: 6a79f0cabf8831d539f606d2
Added to database: 08/10/2026, 15:39:54 UTC
Last enriched: 08/10/2026, 15:47:51 UTC
Last updated: 08/11/2026, 03:40:59 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.