| Reporter | Title | Published | Views | Family All 21 |
|---|---|---|---|---|
 | CVE-2026-11769 | 30 Jun 202616:58 | – | circl |
 | CVE-2026-11769 Operator - Namespaced User Path Traversal | 13 Jun 202604:17 | – | cvelist |
 | EUVD-2026-36641 | 19 Jun 202620:51 | – | euvd |
 | Grafana Operator: Privilege escalation from namespace admin to cluster admin via GrafanaDashboard jsonnetLib fileName | 19 Jun 202620:51 | – | github |
| Duplicate Advisory: Privilege escalation from namespace admin to cluster admin via GrafanaDashboard jsonnetLib fileName | 13 Jun 202606:30 | – | github |
 | Operator - Namespaced User Path Traversal | 13 Jun 202600:00 | – | grafana |
 | CVE-2026-11769 | 13 Jun 202604:17 | – | mend |
 | CVE-2026-11769 | 13 Jun 202606:16 | – | nvd |
 | CVE-2026-11769 Operator - Namespaced User Path Traversal | 13 Jun 202604:17 | – | osv_cve |
| GHSA-FCW4-WWQM-M8CF Grafana Operator: Privilege escalation from namespace admin to cluster admin via GrafanaDashboard jsonnetLib fileName | 19 Jun 202620:51 | – | osv_ghsa |
10
Node
[
{
"vendor": "Grafana",
"product": "Grafana Operator",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "semver",
"lessThanOrEqual": "5.23.0"
}
]
}
]| Source | Link |
|---|---|
| grafana | www.grafana.com/security/security-advisories/cve-2026-11769 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| spec.jsonnetLib | request body | /api | The Grafana Operator evaluates jsonnet expressions in the context of the operator manager pod. A malicious user can use the jsonnet data templating language in Dashboard or LibraryPanel resources to perform path traversal and obtain the Kubernetes service account token. | CWE-22 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
27 Aug 2026 17:22Current
7.9High risk
Vulners AI Score7.9
CVSS 3.18.8
CVSS 46.4
EPSS0.00361
SSVC