CVE-2026-100105

A flaw was found in Grafana. An authenticated user with permission to edit alert contact points can bypass field-level authorization restrictions by switching an integration to a legacy schema version. This flaw allows the user to alter protected settings such as destination URLs, potentially...