CVE-2026-33376
Fixed in a distro release EPSS <1%CVSS 7.4
When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses. Addresses specifying a mask explicitly are not affected; to mitigate easily, add the desired mask (usually /128) to the addresses. Only auth proxy is affected; Okta, SAML, LDAP, etc are unaffected here.
Products: Grafana OSS
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 10 | grafana | 10.2.6-28.el10_2.4 |
| AlmaLinux 10 | grafana-selinux | 10.2.6-28.el10_2.4 |
| AlmaLinux 9 | grafana | 10.2.6-23.el9_8.2 |
| AlmaLinux 9 | grafana-selinux | 10.2.6-23.el9_8.2 |
| Chainguard | grafana-12.0 | no fix |
| Chainguard | grafana-12.1 | no fix |
| Chainguard | grafana-12.4 | 12.4.3.02-r0 |
| Chainguard | grafana-fips-12.0 | no fix |
| Chainguard | grafana-fips-12.1 | no fix |
| Chainguard | grafana-fips-12.4 | 12.4.4-r0 |
| Red Hat Enterprise Linux 10.2 | grafana | 0:10.2.6-28.el10_2.4 |
| Red Hat Enterprise Linux 10.2 | grafana-debuginfo | 0:10.2.6-28.el10_2.4 |
| Red Hat Enterprise Linux 10.2 | grafana-debugsource | 0:10.2.6-28.el10_2.4 |
| Red Hat Enterprise Linux 10.2 | grafana-selinux | 0:10.2.6-28.el10_2.4 |
| Red Hat Enterprise Linux 9 | grafana | 0:10.2.6-23.el9_8.2 |
| Red Hat Enterprise Linux 9 | grafana-debuginfo | 0:10.2.6-23.el9_8.2 |
| Red Hat Enterprise Linux 9 | grafana-debugsource | 0:10.2.6-23.el9_8.2 |
| Red Hat Enterprise Linux 9 | grafana-selinux | 0:10.2.6-23.el9_8.2 |
| Red Hat Enterprise Linux eus 10.0 | grafana | 0:10.2.6-26.el10_0 |
| Red Hat Enterprise Linux eus 10.0 | grafana-debuginfo | 0:10.2.6-26.el10_0 |
| Red Hat Enterprise Linux eus 10.0 | grafana-debugsource | 0:10.2.6-26.el10_0 |
| Red Hat Enterprise Linux eus 10.0 | grafana-selinux | 0:10.2.6-26.el10_0 |
| Red Hat hummingbird 1 | grafana12.4 | 0:12.4.10-0.6.hum1 |
| Red Hat hummingbird 1 | grafana13.1 | 0:13.1.6-0.1.hum1 |
| Red Hat hummingbird 1 | grafana13.2 | 0:13.2.1-0.5.hum1 |
| Red Hat rhel e4s 9.2 | grafana | 0:9.0.9-13.el9_2 |
| Red Hat rhel e4s 9.2 | grafana-debuginfo | 0:9.0.9-13.el9_2 |
| Red Hat rhel e4s 9.2 | grafana-debugsource | 0:9.0.9-13.el9_2 |
| Red Hat rhel e4s 9.4 | grafana | 0:9.2.10-28.el9_4 |
| Red Hat rhel e4s 9.4 | grafana-debuginfo | 0:9.2.10-28.el9_4 |
| Red Hat rhel e4s 9.4 | grafana-debugsource | 0:9.2.10-28.el9_4 |
| Red Hat rhel e4s 9.4 | grafana-selinux | 0:9.2.10-28.el9_4 |
| Red Hat rhel eus 9.6 | grafana | 0:10.2.6-23.el9_6 |
| Red Hat rhel eus 9.6 | grafana-debuginfo | 0:10.2.6-23.el9_6 |
| Red Hat rhel eus 9.6 | grafana-debugsource | 0:10.2.6-23.el9_6 |
| Red Hat rhel eus 9.6 | grafana-selinux | 0:10.2.6-23.el9_6 |
| Rocky Linux 10 | grafana | 0:10.2.6-28.el10_2.4 |
| Rocky Linux 9 | grafana | 0:10.2.6-23.el9_8.2 |
| SUSE Linux Enterprise Module for Package Hub 15 SP7 | grafana | 12.4.5-150200.3.91.1 |
| SUSE Multi Linux Manager Tools SLE-15 | dracut-saltboot | 1.2.1-150002.3.9.1 |
| SUSE Multi Linux Manager Tools SLE-15 | golang-github-QubitProducts-exporter_exporter | 0.4.0-150002.3.6.2 |
| SUSE Multi Linux Manager Tools SLE-15 | golang-github-boynux-squid_exporter | 1.13.0-150002.3.6.2 |
| SUSE Multi Linux Manager Tools SLE-15 | golang-github-lusitaniae-apache_exporter | 1.0.10-150002.3.9.2 |
| SUSE Multi Linux Manager Tools SLE-15 | golang-github-prometheus-alertmanager | 0.28.1-150002.4.11.1 |
| SUSE Multi Linux Manager Tools SLE-15 | golang-github-prometheus-node_exporter | 1.10.2-150002.3.6.2 |
| SUSE Multi Linux Manager Tools SLE-15 | golang-github-prometheus-prometheus | 3.5.3-150002.3.13.1 |
| SUSE Multi Linux Manager Tools SLE-15 | grafana | 11.6.14+security04-150002.4.21.1 |
| SUSE Multi Linux Manager Tools SLE-15 | mgr-push | 5.2.4-150002.3.9.1 |
| SUSE Multi Linux Manager Tools SLE-15 | prometheus-blackbox_exporter | 0.26.0-150002.3.11.1 |
| SUSE Multi Linux Manager Tools SLE-15 | prometheus-postgres_exporter | 0.10.1-150002.3.3.2 |
| SUSE Multi Linux Manager Tools SLE-15 | python-defusedxml-sle15 | 0.7.1-150002.1.3.1 |
| SUSE Multi Linux Manager Tools SLE-15 | rhnlib | 5.2.5-150002.3.9.1 |
| SUSE Multi Linux Manager Tools SLE-15 | spacecmd | 5.2.8-150002.3.12.1 |
| SUSE Multi Linux Manager Tools SLE-15 | spacewalk-client-tools | 5.2.6-150002.3.9.1 |
| SUSE Multi Linux Manager Tools SLE-15 | supportutils-plugin-salt | 1.2.3-150002.3.3.1 |
| SUSE Multi Linux Manager Tools SLE-15 | supportutils-plugin-susemanager-client | 5.2.3-150002.3.9.1 |
| SUSE Multi Linux Manager Tools SLE-15 | uyuni-common-libs | 5.2.5-150002.3.6.1 |
| SUSE Multi Linux Manager Tools SLE-15 | uyuni-tools | 5.2.12-150002.3.17.1 |
| SUSE Multi Linux Manager Tools SLE-Micro-5 | dracut-saltboot | 1.2.1-150002.3.9.1 |
| SUSE Multi Linux Manager Tools SLE-Micro-5 | golang-github-prometheus-node_exporter | 1.10.2-150002.3.6.2 |
| SUSE Multi Linux Manager Tools SLE-Micro-5 | uyuni-tools | 5.2.12-150002.3.17.1 |
| SUSE Multi-Linux Manager Proxy Extension for SLE 5.1 | suse-multi-linux-manager-5.1-aarch64-proxy-httpd-image | 5.1.4-8.22.22 |
| SUSE Multi-Linux Manager Proxy Extension for SLE 5.1 | suse-multi-linux-manager-5.1-aarch64-proxy-salt-broker-image | 5.1.4-9.20.25 |
| SUSE Multi-Linux Manager Proxy Extension for SLE 5.1 | suse-multi-linux-manager-5.1-aarch64-proxy-squid-image | 5.1.4-8.20.11 |
| SUSE Multi-Linux Manager Proxy Extension for SLE 5.1 | suse-multi-linux-manager-5.1-aarch64-proxy-ssh-image | 5.1.4-8.20.12 |
| SUSE Multi-Linux Manager Proxy Extension for SLE 5.1 | suse-multi-linux-manager-5.1-aarch64-proxy-tftpd-image | 5.1.4-8.20.13 |
| SUSE Multi-Linux Manager Proxy Extension for SLE 5.1 | suse-multi-linux-manager-5.1-ppc64le-proxy-httpd-image | 5.1.4-8.22.22 |
| SUSE Multi-Linux Manager Proxy Extension for SLE 5.1 | suse-multi-linux-manager-5.1-ppc64le-proxy-salt-broker-image | 5.1.4-9.20.25 |
| SUSE Multi-Linux Manager Proxy Extension for SLE 5.1 | suse-multi-linux-manager-5.1-ppc64le-proxy-squid-image | 5.1.4-8.20.11 |
| SUSE Multi-Linux Manager Proxy Extension for SLE 5.1 | suse-multi-linux-manager-5.1-ppc64le-proxy-ssh-image | 5.1.4-8.20.12 |
| SUSE Multi-Linux Manager Proxy Extension for SLE 5.1 | suse-multi-linux-manager-5.1-ppc64le-proxy-tftpd-image | 5.1.4-8.20.13 |
| SUSE Multi-Linux Manager Proxy Extension for SLE 5.1 | suse-multi-linux-manager-5.1-s390x-proxy-httpd-image | 5.1.4-8.22.22 |
| SUSE Multi-Linux Manager Proxy Extension for SLE 5.1 | suse-multi-linux-manager-5.1-s390x-proxy-salt-broker-image | 5.1.4-9.20.25 |
| SUSE Multi-Linux Manager Proxy Extension for SLE 5.1 | suse-multi-linux-manager-5.1-s390x-proxy-squid-image | 5.1.4-8.20.11 |
| SUSE Multi-Linux Manager Proxy Extension for SLE 5.1 | suse-multi-linux-manager-5.1-s390x-proxy-ssh-image | 5.1.4-8.20.12 |
| SUSE Multi-Linux Manager Proxy Extension for SLE 5.1 | suse-multi-linux-manager-5.1-s390x-proxy-tftpd-image | 5.1.4-8.20.13 |
| SUSE Multi-Linux Manager Proxy Extension for SLE 5.1 | suse-multi-linux-manager-5.1-x86_64-proxy-httpd-image | 5.1.4-8.22.22 |
| SUSE Multi-Linux Manager Proxy Extension for SLE 5.1 | suse-multi-linux-manager-5.1-x86_64-proxy-salt-broker-image | 5.1.4-9.20.25 |
| SUSE Multi-Linux Manager Proxy Extension for SLE 5.1 | suse-multi-linux-manager-5.1-x86_64-proxy-squid-image | 5.1.4-8.20.11 |
| SUSE Multi-Linux Manager Proxy Extension for SLE 5.1 | suse-multi-linux-manager-5.1-x86_64-proxy-ssh-image | 5.1.4-8.20.12 |
| SUSE Multi-Linux Manager Proxy Extension for SLE 5.1 | suse-multi-linux-manager-5.1-x86_64-proxy-tftpd-image | 5.1.4-8.20.13 |
| SUSE Multi-Linux Manager Proxy Extension for SLE 5.1 | uyuni-tools | 5.1.29-150700.3.26.1 |
| SUSE Multi-Linux Manager Server Extension for SLE 5.1 | suse-multi-linux-manager-5.1-aarch64-server-attestation-image | 5.1.4-8.22.10 |
| SUSE Multi-Linux Manager Server Extension for SLE 5.1 | suse-multi-linux-manager-5.1-aarch64-server-hub-xmlrpc-api-image | 5.1.4-8.20.12 |
| SUSE Multi-Linux Manager Server Extension for SLE 5.1 | suse-multi-linux-manager-5.1-aarch64-server-image | 5.1.4-8.20.34 |
| SUSE Multi-Linux Manager Server Extension for SLE 5.1 | suse-multi-linux-manager-5.1-aarch64-server-migration-14-16-image | 5.1.4-8.20.13 |
| SUSE Multi-Linux Manager Server Extension for SLE 5.1 | suse-multi-linux-manager-5.1-aarch64-server-postgresql-image | 5.1.4-6.24.3 |
| SUSE Multi-Linux Manager Server Extension for SLE 5.1 | suse-multi-linux-manager-5.1-aarch64-server-saline-image | 5.1.4-9.20.24 |
| SUSE Multi-Linux Manager Server Extension for SLE 5.1 | suse-multi-linux-manager-5.1-ppc64le-server-attestation-image | 5.1.4-8.22.10 |
| SUSE Multi-Linux Manager Server Extension for SLE 5.1 | suse-multi-linux-manager-5.1-ppc64le-server-hub-xmlrpc-api-image | 5.1.4-8.20.12 |
| SUSE Multi-Linux Manager Server Extension for SLE 5.1 | suse-multi-linux-manager-5.1-ppc64le-server-image | 5.1.4-8.20.34 |
| SUSE Multi-Linux Manager Server Extension for SLE 5.1 | suse-multi-linux-manager-5.1-ppc64le-server-migration-14-16-image | 5.1.4-8.20.13 |
| SUSE Multi-Linux Manager Server Extension for SLE 5.1 | suse-multi-linux-manager-5.1-ppc64le-server-postgresql-image | 5.1.4-6.24.3 |
| SUSE Multi-Linux Manager Server Extension for SLE 5.1 | suse-multi-linux-manager-5.1-ppc64le-server-saline-image | 5.1.4-9.20.24 |
| SUSE Multi-Linux Manager Server Extension for SLE 5.1 | suse-multi-linux-manager-5.1-s390x-server-attestation-image | 5.1.4-8.22.10 |
| SUSE Multi-Linux Manager Server Extension for SLE 5.1 | suse-multi-linux-manager-5.1-s390x-server-hub-xmlrpc-api-image | 5.1.4-8.20.12 |
| SUSE Multi-Linux Manager Server Extension for SLE 5.1 | suse-multi-linux-manager-5.1-s390x-server-image | 5.1.4-8.20.34 |
| SUSE Multi-Linux Manager Server Extension for SLE 5.1 | suse-multi-linux-manager-5.1-s390x-server-migration-14-16-image | 5.1.4-8.20.13 |
| SUSE Multi-Linux Manager Server Extension for SLE 5.1 | suse-multi-linux-manager-5.1-s390x-server-postgresql-image | 5.1.4-6.24.3 |
| SUSE Multi-Linux Manager Server Extension for SLE 5.1 | suse-multi-linux-manager-5.1-s390x-server-saline-image | 5.1.4-9.20.24 |
| SUSE Multi-Linux Manager Server Extension for SLE 5.1 | suse-multi-linux-manager-5.1-x86_64-server-attestation-image | 5.1.4-8.22.10 |
| SUSE Multi-Linux Manager Server Extension for SLE 5.1 | suse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-image | 5.1.4-8.20.12 |
| SUSE Multi-Linux Manager Server Extension for SLE 5.1 | suse-multi-linux-manager-5.1-x86_64-server-image | 5.1.4-8.20.34 |
| SUSE Multi-Linux Manager Server Extension for SLE 5.1 | suse-multi-linux-manager-5.1-x86_64-server-migration-14-16-image | 5.1.4-8.20.13 |
| SUSE Multi-Linux Manager Server Extension for SLE 5.1 | suse-multi-linux-manager-5.1-x86_64-server-postgresql-image | 5.1.4-6.24.3 |
| SUSE Multi-Linux Manager Server Extension for SLE 5.1 | suse-multi-linux-manager-5.1-x86_64-server-saline-image | 5.1.4-9.20.24 |
| SUSE Multi-Linux Manager Server Extension for SLE 5.1 | uyuni-tools | 5.1.29-150700.3.26.1 |
| Ubuntu 16.04 LTS | grafana | no fix |
| Wolfi | grafana-12.4 | 12.4.3.02-r0 |
| openSUSE Leap 16.0 | grafana | 11.6.14+security04-bp160.1.1 |
| openSUSE Tumbleweed | grafana | 11.6.14+security04-1.1 |