{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3agrafana_labsgrafana/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:grafana_labs:grafana:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.1,"id":"CVE-2026-111024"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Grafana"],"_cs_severities":["high"],"_cs_tags":["authorization-bypass","privilege-escalation","cloud"],"_cs_type":"advisory","_cs_vendors":["Grafana Labs"],"content_html":"\u003cp\u003eCVE-2026-111024 is an authorization bypass vulnerability in the Git Sync feature of Grafana. Users assigned with the Viewer or Editor role can bypass folder-level permissions when interacting with the repository files API. This allows Viewers to read files in restricted folders and Editors to manipulate, move, or delete provisioned dashboards and folders that should be protected.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eA malicious user with limited 'Viewer' or 'Editor' roles can exceed their intended access level, leading to unauthorized data disclosure and unauthorized modification or destruction of provisioned resources.\u003c/p\u003e\n","date_modified":"2026-11-11T16:16:10Z","date_published":"2026-11-11T16:16:10Z","id":"https://feed.craftedsignal.io/briefs/2026-11-grafana-auth-bypass-cve-2026-111024/","summary":"Grafana Git Sync contains an authorization bypass vulnerability (CVE-2026-111024) allowing users with Viewer or Editor roles to perform unauthorized actions on protected folders and dashboards.","title":"Grafana: Authorization Bypass via Git Sync (CVE-2026-111024)","url":"https://feed.craftedsignal.io/briefs/2026-11-grafana-auth-bypass-cve-2026-111024/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:grafana_labs:grafana:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}