CVE-2026-81842: CWE-863 in Grafana Grafana Enterprise
An authenticated user with edit permission on one folder can move a library panel into another folder where they only have view permission, through the library elements API or the equivalent App Platform resource. The update path did not check library panel create permission on the destination folder (incorrect authorization). No data from the destination folder is disclosed, and existing content there cannot be changed.
AI Analysis
Technical Summary
This vulnerability (CWE-863) in Grafana Enterprise allows an authenticated user with edit permissions on a source folder to move a library panel into a destination folder where they only have view permissions. The flaw exists because the library elements API or equivalent App Platform resource fails to check for create permissions on the destination folder during the update operation. The vulnerability does not disclose data from the destination folder nor allow modification of existing content there.
Potential Impact
The impact is limited to unauthorized movement of library panels into folders where the user lacks create permission. There is no data disclosure or alteration of existing content in the destination folder. The CVSS score of 4.3 reflects a medium severity with limited impact on confidentiality and integrity.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict edit permissions carefully and monitor for unusual activity involving library panel movements.
CVE-2026-81842: CWE-863 in Grafana Grafana Enterprise
Description
An authenticated user with edit permission on one folder can move a library panel into another folder where they only have view permission, through the library elements API or the equivalent App Platform resource. The update path did not check library panel create permission on the destination folder (incorrect authorization). No data from the destination folder is disclosed, and existing content there cannot be changed.
CVSS v3.1
Score 4.3medium
Affected software
Grafana
Grafana Enterprise
Grafana
Grafana OSS
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CWE-863) in Grafana Enterprise allows an authenticated user with edit permissions on a source folder to move a library panel into a destination folder where they only have view permissions. The flaw exists because the library elements API or equivalent App Platform resource fails to check for create permissions on the destination folder during the update operation. The vulnerability does not disclose data from the destination folder nor allow modification of existing content there.
Potential Impact
The impact is limited to unauthorized movement of library panels into folders where the user lacks create permission. There is no data disclosure or alteration of existing content in the destination folder. The CVSS score of 4.3 reflects a medium severity with limited impact on confidentiality and integrity.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict edit permissions carefully and monitor for unusual activity involving library panel movements.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GRAFANA
- Date Reserved
- 2026-08-27T15:48:54.245Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6abc287d680226ef6848d2d8
Added to database: 09/29/2026, 21:07:09 UTC
Last enriched: 09/29/2026, 21:21:40 UTC
Last updated: 09/30/2026, 03:31:35 UTC
Views: 12
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.