{"api_version":"1","generated_at":"2026-10-15T11:17:14+00:00","cve":"CVE-2026-81841","urls":{"html":"https://cve.report/CVE-2026-81841","api":"https://cve.report/api/cve/CVE-2026-81841.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-81841","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-81841"},"summary":{"title":"Paused shared dashboard access tokens still expose data source configuration","description":"Pausing a shared (public) dashboard did not revoke its access token for the endpoints that serve frontend bootstrap data. Anyone holding the link to a paused shared dashboard could still retrieve, without authenticating, the configuration of the dashboard's data sources, including stored credentials for data sources using browser access (missing authorization). Deleting the shared dashboard does revoke the token.","state":"PUBLISHED","assigner":"GRAFANA","published_at":"2026-09-29 21:19:31","updated_at":"2026-09-30 17:23:08"},"problem_types":["CWE-862","CWE-862 CWE-862"],"metrics":[{"version":"3.1","source":"security@grafana.com","type":"Secondary","score":"5.3","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"}},{"version":"3.1","source":"CNA","type":"DECLARED","score":"5.3","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","data":{"baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"}}],"references":[{"url":"https://grafana.com/security/security-advisories/cve-2026-81841","name":"https://grafana.com/security/security-advisories/cve-2026-81841","refsource":"security@grafana.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-81841","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81841","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Grafana","product":"Grafana Enterprise","version":"affected 11.6.0 11.6.17 semver","platforms":[]},{"source":"CNA","vendor":"Grafana","product":"Grafana Enterprise","version":"affected 12.0.0 12.0.10 semver","platforms":[]},{"source":"CNA","vendor":"Grafana","product":"Grafana Enterprise","version":"affected 12.1.0 12.1.10 semver","platforms":[]},{"source":"CNA","vendor":"Grafana","product":"Grafana Enterprise","version":"affected 12.2.0 12.2.11 semver","platforms":[]},{"source":"CNA","vendor":"Grafana","product":"Grafana Enterprise","version":"affected 12.3.0 12.3.11 semver","platforms":[]},{"source":"CNA","vendor":"Grafana","product":"Grafana Enterprise","version":"affected 12.4.0 12.4.12 semver","platforms":[]},{"source":"CNA","vendor":"Grafana","product":"Grafana Enterprise","version":"affected 13.0.0 13.0.10 semver","platforms":[]},{"source":"CNA","vendor":"Grafana","product":"Grafana Enterprise","version":"affected 13.1.0 13.1.7 semver","platforms":[]},{"source":"CNA","vendor":"Grafana","product":"Grafana Enterprise","version":"affected 13.2.0 13.2.3 semver","platforms":[]},{"source":"CNA","vendor":"Grafana","product":"Grafana OSS","version":"affected 11.6.0 11.6.17 semver","platforms":[]},{"source":"CNA","vendor":"Grafana","product":"Grafana OSS","version":"affected 12.0.0 12.0.10 semver","platforms":[]},{"source":"CNA","vendor":"Grafana","product":"Grafana OSS","version":"affected 12.1.0 12.1.10 semver","platforms":[]},{"source":"CNA","vendor":"Grafana","product":"Grafana OSS","version":"affected 12.2.0 12.2.11 semver","platforms":[]},{"source":"CNA","vendor":"Grafana","product":"Grafana OSS","version":"affected 12.3.0 12.3.11 semver","platforms":[]},{"source":"CNA","vendor":"Grafana","product":"Grafana OSS","version":"affected 12.4.0 12.4.12 semver","platforms":[]},{"source":"CNA","vendor":"Grafana","product":"Grafana OSS","version":"affected 13.0.0 13.0.10 semver","platforms":[]},{"source":"CNA","vendor":"Grafana","product":"Grafana OSS","version":"affected 13.1.0 13.1.7 semver","platforms":[]},{"source":"CNA","vendor":"Grafana","product":"Grafana OSS","version":"affected 13.2.0 13.2.3 semver","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[{"source":"CNA","value":"Yeonoh Park @ CIS Lab, SeoulTech","lang":"en"}],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-81841","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-09-29T20:55:29.746576Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-09-29T21:01:59.754Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"defaultStatus":"unaffected","product":"Grafana Enterprise","vendor":"Grafana","versions":[{"lessThanOrEqual":"11.6.17","status":"affected","version":"11.6.0","versionType":"semver"},{"lessThanOrEqual":"12.0.10","status":"affected","version":"12.0.0","versionType":"semver"},{"lessThanOrEqual":"12.1.10","status":"affected","version":"12.1.0","versionType":"semver"},{"lessThanOrEqual":"12.2.11","status":"affected","version":"12.2.0","versionType":"semver"},{"lessThanOrEqual":"12.3.11","status":"affected","version":"12.3.0","versionType":"semver"},{"lessThan":"12.4.12","status":"affected","version":"12.4.0","versionType":"semver"},{"lessThan":"13.0.10","status":"affected","version":"13.0.0","versionType":"semver"},{"lessThan":"13.1.7","status":"affected","version":"13.1.0","versionType":"semver"},{"lessThan":"13.2.3","status":"affected","version":"13.2.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Grafana OSS","vendor":"Grafana","versions":[{"lessThanOrEqual":"11.6.17","status":"affected","version":"11.6.0","versionType":"semver"},{"lessThanOrEqual":"12.0.10","status":"affected","version":"12.0.0","versionType":"semver"},{"lessThanOrEqual":"12.1.10","status":"affected","version":"12.1.0","versionType":"semver"},{"lessThanOrEqual":"12.2.11","status":"affected","version":"12.2.0","versionType":"semver"},{"lessThanOrEqual":"12.3.11","status":"affected","version":"12.3.0","versionType":"semver"},{"lessThan":"12.4.12","status":"affected","version":"12.4.0","versionType":"semver"},{"lessThan":"13.0.10","status":"affected","version":"13.0.0","versionType":"semver"},{"lessThan":"13.1.7","status":"affected","version":"13.1.0","versionType":"semver"},{"lessThan":"13.2.3","status":"affected","version":"13.2.0","versionType":"semver"}]}],"credits":[{"lang":"en","type":"finder","value":"Yeonoh Park @ CIS Lab, SeoulTech"}],"datePublic":"2026-09-29T07:44:02.000Z","descriptions":[{"lang":"en","value":"Pausing a shared (public) dashboard did not revoke its access token for the endpoints that serve frontend bootstrap data. Anyone holding the link to a paused shared dashboard could still retrieve, without authenticating, the configuration of the dashboard's data sources, including stored credentials for data sources using browser access (missing authorization). Deleting the shared dashboard does revoke the token."}],"metrics":[{"cvssV3_1":{"baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-862","description":"CWE-862","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-09-30T13:05:14.107Z","orgId":"57da9224-a3e2-4646-9d0e-c4dc2e05e7da","shortName":"GRAFANA"},"references":[{"tags":["vendor-advisory"],"url":"https://grafana.com/security/security-advisories/cve-2026-81841"}],"source":{"discovery":"BUG_BOUNTY"},"title":"Paused shared dashboard access tokens still expose data source configuration"}},"cveMetadata":{"assignerOrgId":"57da9224-a3e2-4646-9d0e-c4dc2e05e7da","assignerShortName":"GRAFANA","cveId":"CVE-2026-81841","datePublished":"2026-09-29T20:35:57.152Z","dateReserved":"2026-08-27T15:33:30.272Z","dateUpdated":"2026-09-30T13:05:14.107Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-09-29 21:19:31","lastModifiedDate":"2026-09-30 17:23:08","problem_types":["CWE-862","CWE-862 CWE-862"],"metrics":{"cvssMetricV31":[{"source":"security@grafana.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-29T20:55:29.746576Z","id":"CVE-2026-81841","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"81841","Ordinal":"1","Title":"Paused shared dashboard access tokens still expose data source c","CVE":"CVE-2026-81841","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"81841","Ordinal":"1","NoteData":"Pausing a shared (public) dashboard did not revoke its access token for the endpoints that serve frontend bootstrap data. Anyone holding the link to a paused shared dashboard could still retrieve, without authenticating, the configuration of the dashboard's data sources, including stored credentials for data sources using browser access (missing authorization). Deleting the shared dashboard does revoke the token.","Type":"Description","Title":"Paused shared dashboard access tokens still expose data source c"}]}}}