CVE-2026-100105

Grafana is affected by an incorrect authorization vulnerability (CVE-2026-100105 ) where a user with permission to edit contact points but not their protected fields can bypass restrictions. By switching an integration to a legacy schema version , an attacker can modify protected settings such as...