← Database

CVE-2026-33377

HIGH CVSS: 7.1 Published: 2026-05-13 Modified: 2026-06-17

Description

An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate privilege.

Affected Platforms

Grafana Grafana

Weakness Type

CWE-287, CWE-284

References