CVE-2026-21727P4LOWCVSS 3.3≥ 10.2.0, < 12.4.02026-04-15
CVE-2026-21727 [LOW] CWE-732 CVE-2026-21727: A cross-tenant isolation vulnerability was found in Grafana’s Correlations feature affecting legacy
A cross-tenant isolation vulnerability was found in Grafana’s Correlations feature affecting legacy correlation records. Due to a backward compatibility condition allowing org_id = 0 records to be returned across organizations, a user with datasource management privileges could read and permanently delete legacy correlation data belonging to another org
nvd