Grafana OSS (< 12.4.14, 13.0.12, 13.1.9, 13.2.5)

CVE-2026-100105 is an authorization bypass in Grafana Alerting Contact Points that allows attackers with Editor permissions to redirect alert notifications to unauthorized destinations and exfiltrate credentials through schema version manipulation.