CVE-2026-106475

A flaw was found in Grafana's Elasticsearch data source. An authenticated user with permission to query the data source, such as a viewer, can send arbitrary requests to the connected Elasticsearch cluster using the data source's stored credentials. This allows an attacker to bypass intended...