CVE-2026-110289

In Grafana , a user with the Organization Admin role can exploit a Server-Side Request Forgery (SSRF) vulnerability. By pointing the server or token URL of a Git Sync connection to a loopback or internal address, the application can be induced to send the connection's OAuth client secret and toke...