CVE-2026-103506

An improper authorization vulnerability in Grafana OSS and Enterprise 13.2 allows authenticated users to read SSO client secrets and modify instance-wide SSO settings without required permissions. This issue occurs when the experimental kubernetesSsoSettingsApi feature toggle is enabled (it is di...

EUVD-2026-112201

An authenticated user in Grafana can read SSO client secrets and modify instance-wide SSO settings without the required permissions missing authorization. This affects Grafana OSS and Enterprise 13.2 installations with the experimental kubernetesSsoSettingsApi feature toggle enabled, which is...