Reconnecting to live updates…

CVE-2026-21722: Vulnerability in Grafana grafana/grafana

Medium

VulnerabilityCVE-2026-21722cve cve-2026-21722

Published: Thu Feb 12 2026 (02/12/2026, 08:49:05 UTC)

Source: CVE Database V5

Vendor/Project: Grafana

Product: grafana/grafana

Description

Public dashboards with annotations enabled did not limit their annotation timerange to the locked timerange of the public dashboard. This means one could read the entire history of annotations visible on the specific dashboard, even those outside the locked timerange. This did not leak any annotations that would not otherwise be visible on the public dashboard.

Technical Details

Data Version: 5.2
Assigner Short Name: GRAFANA
Date Reserved: 2026-01-05T09:26:06.214Z
Cvss Version: 3.1
State: PUBLISHED

Threat ID: 698d9b14c9e1ff5ad8b1f9ef

Added to database: 2/12/2026, 9:19:16 AM

Last updated: 2/12/2026, 9:19:18 AM

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by

Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.