CVE-2026-33377

CVE-2026-33377 describes a vulnerability where an Editor can overwrite a dashboard not owned by them, escalating to admin on that specific dashboard. The user must have write access to the dashboard to perform the privilege escalation. This issue is tied to dashboard import behavior and ACL handl...