Brand
Grafana Labs: actively exploited vulnerabilities
2 vulnerabilities in Grafana Labs products (Grafana) are in CISA’s catalog of exploited vulnerabilities. Last added: October 9, 2025.
-
1 vulnerability added in the last 12 months
-
2 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one Grafana Labs category to your radar, or open its page.
- Monitoring, ITSM and asset management 2 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- Grafana2 vulnerabilities, Monitoring and ITSM
Name used by CISA: Grafana Labs. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Grafana Labs list.
- Rank 1
Grafana Labs GrafanaCVE-2021-43798
Grafana Path Traversal Vulnerability
CVE from 2021, added in 2025
CVSS severity 7.5high
Added Oct 9, 2025
- Rank 2
Grafana Labs GrafanaCVE-2021-39226
Grafana Authentication Bypass Vulnerability
CVSS severity 7.3high
Added Aug 25, 2022
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.