CVE-2024-9264

CVE-2024-9264 Authenticated RCE in Grafana v11.0 via SQL Expressions - PoC Exploit CVE-2024-9264 - Grafana v11.0 Authenticated Remote Code Execution RCE PoC Introduction CVE-2024-9264 is a critical remote-code-execution and local-file-inclusion flaw introduced in Grafana 11’s experimental “SQL...

CVE-2024-9264-RCE-Exploit

CVE-2024-9264 RCE-Эксплойт в Grafana через SQL-выражения Описание Доказательство концепции удаленного выполнения кода в Grafana CVE-2024-9264 Этот репозиторий содержит Python-скрипт, который эксплуатирует уязвимость удаленного выполнения кода RCE в функции SQL-выражений Grafana. Используя...

CVE-2024-9264

CVE-2024-9264 - Эксплойт Grafana SQL Expressions DuckDB LFI/RCE PoC Эксплойт на Python для CVE-2024-9264, уязвимости Grafana SQL Expressions, которая позволяет аутентифицированному пользователю выполнять включение локальных файлов и команд, когда duckdb доступен в PATH процесса Grafana. Только дл...

CVE-2024-9264-Fixed

🛠️ CVE-2024-9264 - 수정된 Grafana RCE 익스플로잇 이것은 CVE-2024-9264 에 대한 개념 증명 익스플로잇의 수정된 버전 으로, Grafana의 치명적인 원격 코드 실행 취약점SQL 표현식 및 DuckDB를 통한입니다. 🔗 원본 권고: Grafana 보안 릴리스 ❌ 원본 PoC: 구문 오류 및 writefile의 잘못된 사용으로 인해 작동하지 않음 ✅ 이 버전은 취약한 Grafana 11.0.0 인스턴스에서 테스트되었으며 작동합니다. ✅ 이 버전에서 수정된 사항 ✅ writefile 대신...

day05-grafana-sqlexpr-lab

Day 5 – Grafana SQL Expressions → DuckDB LFI CVE-2024-9264 TL;DR: On affected Grafana 11.x builds, a logged-in Viewer can use SQL Expressions. Grafana forwards the expression to DuckDB on the server. With readtext / readblob, you can read local files LFI. We plant a flag at /opt/flag.txt. Build →...

CVE-2026-27876

CVE-2026-27876: Grafana SQL Expressions 임의 파일 쓰기에서 RCE까지 CVSS 9.1 Critical | 임의 파일 쓰기 | 원격 코드 실행 데모 https://github.com/user-attachments/assets/c84a4b63-7928-4dba-a069-3bafa036ce56 요약 Grafana의 SQL Expressions 기능sqlExpressions 토글은 결함이 있는 AST 허용 목록을 사용하는 프로세스 내 SQL 엔진dolthub/go-mysql-server을 사용합니다...

CVE-2024-9264

CVE-2024-9264-RCE-Exploit in Grafana via SQL Expressions Description Proof Of Concept for Remote Code Execution in Grafana CVE-2024-9264 This repository contains a Python script that exploits a Remote Code Execution RCE vulnerability in Grafana's SQL Expressions feature. By leveraging insufficien...

CVE-2026-27876

🚨 CVE-2026-27876 - SQL Expressions를 통한 Grafana 치명적 RCE SQL Expressions를 통한 임의 파일 쓰기를 가능하게 하여 호스트에서 완전한 원격 코드 실행RCE으로 이어지는 연쇄 취약점입니다. 📋 개요 CVE ID : CVE-2026-27876 심각도 : 치명적Critical CVSS v3.1: 9.1 공개일 : 2026년 3월 27일 CWE : CWE-94 코드 생성을 위한 제어 부재 / 코드 주입 Grafana의 SQL Expressions 기능v11.6.0에서 MySQL 유사...

Exploit for Code Injection in Grafana

CVE-2026-27876: Grafana SQL Expressions Arbitrary File Write t...

Exploit for Command Injection in Grafana

CVE-2024-9264 - Grafana SQL Expressions DuckDB LFI/RCE PoC Py...

GO-2026-5409 Grafana: SQL Expressions Read File From Disk in github.com/grafana/grafana

Grafana: SQL Expressions Read File From Disk in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, please...

Linux Distros Unpatched Vulnerability : CVE-2026-33380

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the...

BIT-GRAFANA-2026-33380 SQL Expressions Read File From Disk

A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable...

SUSE CVE-2026-33380

A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable...

EUVD-2026-30145

A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable...

GHSA-GXCP-JJXH-RWP4 Grafana: SQL Expressions Read File From Disk

A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable...

CVE-2026-33380

A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable...

CVE-2026-33380

A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable...

CVE-2026-33380

CVE-2026-33380 describes a vulnerability in Grafana’s SQL Expressions feature. An authenticated attacker can read arbitrary files from the Grafana server’s filesystem when the sqlExpressions feature toggle is enabled. The issue affects requests that reach the SQL Expressions component and leverag...

CVE-2026-33380

A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable...