Exploit for Path Traversal in Grafana

CVE-2021-43798 - Grafana Arbitrary File Read Python toolkit f...

CVE-2026-33380 SQL Expressions Read File From Disk

A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable...