CPE
Independent Grafana instances sharing the same renderer_token are susceptible to cross-instance user impersonation due to an origin validation error in the image renderer.