CVE-2026-81842
published 2026-09-29CVE-2026-81842: An authenticated user with edit permission on one folder can move a library panel into another folder where they only have view permission, through the library…
PriorityP423medium4.3CVSS 3.1
AVNACLPRLUINSUCNILAN
EPSS
0.20%
8.9th percentile
An authenticated user with edit permission on one folder can move a library panel into another folder where they only have view permission, through the library elements API or the equivalent App Platform resource. The update path did not check library panel create permission on the destination folder (incorrect authorization). No data from the destination folder is disclosed, and existing content there cannot be changed.
Affected
18 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| grafana | grafana | — | — |
| grafana | grafana_enterprise | 12.1.0 – 12.1.10 | — |
| grafana | grafana_enterprise | 12.2.0 – 12.2.11 | — |
| grafana | grafana_enterprise | 12.3.0 – 12.3.11 | — |
| grafana | grafana_enterprise | >= 12.4.0 < 12.4.12 | 12.4.12 |
| grafana | grafana_enterprise | >= 13.0.0 < 13.0.10 | 13.0.10 |
| grafana | grafana_oss | 12.1.0 – 12.1.10 | — |
| grafana | grafana_oss | 12.2.0 – 12.2.11 | — |
| grafana | grafana_oss | 12.3.0 – 12.3.11 | — |
| grafana | grafana_oss | >= 12.4.0 < 12.4.12 | 12.4.12 |
| grafana | grafana_oss | >= 13.0.0 < 13.0.10 | 13.0.10 |
| multicluster-globalhub | multicluster-globalhub-grafana-rhel9 | — | — |
| rhacm2 | acm-grafana-rhel9 | — | — |
| rhceph-ci | grafana | — | — |
| rhceph | grafana-rhel10 | — | — |
| rhceph | grafana-rhel9 | — | — |
| rhel10 | grafana | — | — |
| rhel9 | grafana | — | — |
CVSS provenance
nvdv3.14.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
vendor_redhat4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
An authenticated user with edit permission on one folder can move a library panel into another folder where they only have view permission, through the library elements API or the equivalent App Platf
ghsa_unreviewed·2026-09-29
CVE-2026-81842 [MEDIUM] CWE-863 An authenticated user with edit permission on one folder can move a library panel into another folder where they only have view permission, through the library elements API or the equivalent App Platf
An authenticated user with edit permission on one folder can move a library panel into another folder where they only have view permission, through the library elements API or the equivalent App Platform resource. The update path did not check library panel create permission on the destination folder (incorrect authorization). No data from the destination folder is disclosed, and existing content there cannot be changed.
VulDB
Grafana Enterprise/OSS up to 13.0.9 Library Panel improper authorization
vuldb·2026-09-29·CVSS 4.3
CVE-2026-81842 [MEDIUM] Grafana Enterprise/OSS up to 13.0.9 Library Panel improper authorization
A vulnerability classified as problematic has been found in Grafana Enterprise and OSS up to 12.1.10/12.2.11/12.3.11/12.4.11/13.0.9. Affected is an unknown function of the component Library Panel. Performing a manipulation results in improper authorization.
This vulnerability is known as CVE-2026-81842. Remote exploitation of the attack is possible. No exploit is available.
It is recommended to upgrade the affected component.
Red Hat
grafana: grafana: Authorization bypass via missing destination folder permission check
vendor_redhat·2026-09-29·CVSS 4.3
CVE-2026-81842 [MEDIUM] CWE-639 grafana: grafana: Authorization bypass via missing destination folder permission check
grafana: grafana: Authorization bypass via missing destination folder permission check
An authenticated user with edit permission on one folder can move a library panel into another folder where they only have view permission, through the library elements API or the equivalent App Platform resource. The update path did not check library panel create permission on the destination folder (incorrect authorization). No data from the destination folder is disclosed, and existing content there cannot be changed.
A flaw was found in Grafana. The application fails to verify creation permissions on destination folders during panel update operations. An authenticated user with edit permissions in one folder can exploit this vulnerability through the library elements API to move a library panel int
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-81842 grafana: grafana: Authorization bypass via missing destination folder permission check [fedora-all]
bugzilla·2026-09-30·CVSS 4.3
CVE-2026-81842 [MEDIUM] CVE-2026-81842 grafana: grafana: Authorization bypass via missing destination folder permission check [fedora-all]
CVE-2026-81842 grafana: grafana: Authorization bypass via missing destination folder permission check [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
An authenticated user with edit permission on one folder can move a library panel into another folder where they only have view permission, through the library elements API or the equivalent App Platform resource. The update path did not check library panel create permission on the destination folder (incorrect authorization). No data from the destination folder is disclosed, and existing content there cannot be changed.
Bugzilla
CVE-2026-81842 grafana: grafana: Authorization bypass via missing destination folder permission check
bugzilla·2026-09-29·CVSS 4.3
CVE-2026-81842 [MEDIUM] CVE-2026-81842 grafana: grafana: Authorization bypass via missing destination folder permission check
CVE-2026-81842 grafana: grafana: Authorization bypass via missing destination folder permission check
An authenticated user with edit permission on one folder can move a library panel into another folder where they only have view permission, through the library elements API or the equivalent App Platform resource. The update path did not check library panel create permission on the destination folder (incorrect authorization). No data from the destination folder is disclosed, and existing content there cannot be changed.
2026-09-29
Published