CVE-2026-33380 UNKNOWN

CVE-2026-33380

Published: 2026-05-13

Description

A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable.

AI Intelligence Brief

AI Intelligence

Analyzing vulnerability vectors…