{"id":"CVE-2026-106472","kind":"vulnerability","aliases":["CVE-2026-106472"],"related":[],"title":"Grafana: Prometheus data source lets queries reach any server endpoint","description":"Grafana's Prometheus data source passes the resource path supplied by the caller to the configured Prometheus server without restricting it to the supported API endpoints [missing path allowlist]. A user with permission to query the data source can read responses from other endpoints on that server using the data source's credentials.","summary":"Grafana's Prometheus data source forwards caller-supplied resource paths to the configured Prometheus server without limiting them to supported API endpoints. A user allowed to query the data source can read responses from other endpoints on that server using the data source's stored credentials.","severity":"medium","cvss":6.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["grafana","package","prometheus","self-hosted"],"not_affected_if":["no-credentials-configured","no-prometheus-data-source"],"how_to_check":"- Check the Grafana version with `grafana server -v` or the About page in the Grafana UI.\n- List Prometheus data sources and note any that use stored credentials or basic auth against a server with non-API endpoints.","fix":null,"status":"open","published_at":"2026-11-12T18:17:12+00:00","first_seen_at":"2026-11-12T18:40:37+00:00","triaged_at":"2026-11-12T18:42:57+00:00","updated_at":"2026-11-12T18:42:57+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-11-12T18:42:57Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Grafana: Prometheus data source lets queries reach any server endpoint","impact":"medium","summary":"Grafana's Prometheus data source forwards caller-supplied resource paths to the configured Prometheus server without limiting them to supported API endpoints. A user allowed to query the data source can read responses from other endpoints on that server using the data source's stored credentials.","audience":"businesses","category":"package","nicknames":[],"who_cares":["grafana","prometheus","self-hosted"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"reads other Prometheus server endpoints using the data source's credentials","analyst_note":"Confirm affected Grafana version range and fixed version from the NVD entry or Grafana security advisory; sources give none.","how_to_check":"- Check the Grafana version with `grafana server -v` or the About page in the Grafana UI.\n- List Prometheus data sources and note any that use stored credentials or basic auth against a server with non-API endpoints.\n- unknown for the exact affected version range, as the sources do not state it.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-prometheus-data-source","no-credentials-configured"],"who_is_affected":"Teams running self-hosted Grafana with a Prometheus data source configured with credentials. Users who can run queries against that data source can reach other endpoints on the Prometheus server. Installations without a Prometheus data source, or where the data source has no credentials, are less exposed; the sources do not say more.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000743,"input_tokens":4543,"output_tokens":577,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-106472':13A,16A '-2026':12A,15A 'allow':48B 'allowlist':98C 'api':44B,94C 'caller':30B,82C 'caller-suppli':29B 'configur':36B,85C 'credenti':69B,122C 'cve':11A,14A 'data':3A,26B,52B,65B,73C,106C,119C 'endpoint':10A,45B,59B,95C,113C 'forward':28B 'grafana':1A,17B,23B,70C 'host':22B 'let':5A 'limit':40B 'miss':96C 'packag':18B 'pass':75C 'path':33B,78C,97C 'permiss':102C 'prometheus':2A,19B,25B,37B,72C,86C 'queri':6A,50B,104C 'reach':7A 'read':55B,109C 'resourc':32B,77C 'respons':56B,110C 'restrict':89C 'self':21B 'self-host':20B 'server':9A,38B,62B,87C,116C 'sourc':4A,27B,53B,66B,74C,107C,120C 'store':68B 'suppli':31B,79C 'support':43B,93C 'use':63B,117C 'user':47B,100C 'without':39B,88C","nicknames":[],"mitigations":[],"who_affected":"Teams running self-hosted Grafana with a Prometheus data source configured with credentials. Users who can run queries against that data source can reach other endpoints on the Prometheus server. Installations without a Prometheus data source, or where the data source has no credentials, are less exposed; the sources do not say more.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["grafana","medium","package","prometheus","selfhosted"],"campaign_type":null,"search_a":"'-106472':13A,16A '-2026':12A,15A 'cve':11A,14A 'data':3A 'endpoint':10A 'grafana':1A 'let':5A 'prometheus':2A 'queri':6A 'reach':7A 'server':9A 'sourc':4A","search_b":"'allow':48B 'api':44B 'caller':30B 'caller-suppli':29B 'configur':36B 'credenti':69B 'data':26B,52B,65B 'endpoint':45B,59B 'forward':28B 'grafana':17B,23B 'host':22B 'limit':40B 'packag':18B 'path':33B 'prometheus':19B,25B,37B 'queri':50B 'read':55B 'resourc':32B 'respons':56B 'self':21B 'self-host':20B 'server':38B,62B 'sourc':27B,53B,66B 'store':68B 'suppli':31B 'support':43B 'use':63B 'user':47B 'without':39B","search_c":"'allowlist':98C 'api':94C 'caller':82C 'configur':85C 'credenti':122C 'data':73C,106C,119C 'endpoint':95C,113C 'grafana':70C 'miss':96C 'pass':75C 'path':78C,97C 'permiss':102C 'prometheus':72C,86C 'queri':104C 'read':109C 'resourc':77C 'respons':110C 'restrict':89C 'server':87C,116C 'sourc':74C,107C,120C 'suppli':79C 'support':93C 'use':117C 'user':100C 'without':88C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-12T18:17:12+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss_by":"security@grafana.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-106472","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106472","severity":null,"published_at":"2026-11-12T18:17:12+00:00","modified_at":"2026-11-12T18:17:12+00:00","first_seen_at":"2026-11-12T18:40:37+00:00","fetched_at":"2026-11-12T18:40:37+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}