CVE-2026-42129

Katalog CVE

CVSS 7.7 · High EPSS 0,44%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada grafana loki datasource. Skor CVSS 3.1 7.7 (High) menurut grafana.com.

Deskripsi (NVD)

A user with Viewer permissions can use a path traversal in the Loki data source plugin to reach administrative Loki endpoints and read sensitive backend configuration and internal service information.

Rincian

Terbit di NVD

22 Juni 2026

Terakhir diubah

10 Juli 2026

Status NVD

Modified

CVSS 3.1

7.7 (High), sumber grafana.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

EPSS (30 hari)

0,44% peluang dieksploitasi; lebih tinggi dari 36,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://grafana.com/security/security-advisories/cve-2026-42129 broken link