# CVE-2026-33379

Auth bypass in Grafana 12.4 allows any user to create, publish, and delete dashboard snapshots

- Page: https://www.vulneraibility.com/cve/CVE-2026-33379
- CVSS: 8.5
- Known exploited: not in CISA KEV as of our last sync
- Weakness: CWE-862
- Published: 2026-11-06

## Affected versions

- Grafana Grafana Enterprise: affected >= 12.4.0 and < 12.4.4
- Grafana Grafana OSS: affected >= 12.4.0 and < 12.4.4

A version outside these ranges is not a statement that it is unaffected.

## Impact

Any role (including Viewer/service accounts) can create, externally publish, and delete dashboard snapshots — data exfiltration and monitoring disruption.

## Action

Immediate action required

## Recommendation

Apply vendor patch or upgrade to Grafana 13 immediately; restrict snapshot publishing

## References

- [advisory] https://grafana.com/security/security-advisories/cve-2026-33379

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.