What it is
Grafana contains an authentication bypass vulnerability that allows authenticated and unauthenticated users to view and delete all snapshot data, potentially resulting in complete snapshot data loss.
What to do
Apply updates per vendor instructions.
Vendor notices and references
- grafana.com/blog/2021/10/05/grafana-7.5.11-and-8.1.6-released-with-critical-security-fix/
- nvd.nist.gov/vuln/detail/CVE-2021-39226
Description and required action as published by CISA. Full record at NVD.