CVE-2026-11769

We have released version 5.24.0 of the Grafana Operator. This patch includes a MEDIUM severity security fix for a path traversal/privilege escalation vulnerability in the Grafana Operator. ### Summary The Grafana Operator supports loading dashboards & library panels using the jsonnet data templating language. The jsonnet expression is evaluated in the context of the operator manager pod. ### Impact It is possible for a malicious user who can create Dashboard or LibraryPanel resources for a Grafana instance to obtain the Kubernetes service account token of the Grafana Operator manager. ### Affected versions All Grafana Operator versions <= 5.23 ### Solutions and mitigations All installations should be upgraded as soon as possible. As a workaround, the following ValidatingAdmissionPolicy prevent the creation or modification of jsonnet based resources: apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingAdmissionPolicy metadata: name: "prevent-jsonnet-dashboards" spec: failurePolicy: Fail matchConstraints: resourceRules: - apiGroups: ["grafana.integreatly.org"] apiVersions: ["v1beta1"] operations: ["CREATE", "UPDATE"] resources: ["grafanadashboards", "grafanalibrarypanels"] validations: - expression: "!has(object.spec.jsonnetLib)" --- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingAdmissionPolicyBinding metadata: name: "prevent-jsonnet-dashboards-clusterwide" spec: policyName: "prevent-jsonnet-dashboards" validationActions: [Deny] ### Acknowledgement We would like to thank Artem Cherezov for responsibly disclosing the vulnerability.

• CWE-22

• https://grafana.com/security/security-advisories/cve-2026-11769Mitigation, Vendor Advisory

Published

Jun 13, 2026

Last Modified

Jul 23, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-11756A Deserialization of Untrusted Data vulnerability affecting …10
• CVE-2026-1176A security flaw has been discovered in itsourcecode School M…9.8
• CVE-2026-11763Authorization bypass through User-Controlled key vulnerabili…6.5
• CVE-2026-11764When creating an export of all reusable media, the secrets o…3.6
• CVE-2026-11766The Ultimate Member WordPress plugin before 2.12.0 does not…8
• CVE-2026-11767The Free Builder for Elementor WordPress plugin before 1.6…8.8
• CVE-2026-1177A weakness has been identified in Yonyou KSOA 9.0. Affected …9.8
• CVE-2026-11770A flaw was found in 389 Directory Server. An unauthenticated…7.5
• CVE-2026-11771OpenVPN version 2.1.0 through 2.6.20 and 2.7_alpha1 through …7.5
• CVE-2026-11772DRIMO CMS is vulnerable to Reflected XSS via q parameter in …5.1
• CVE-2026-11773The Masteriyo LMS – LMS Course Builder, Quizzes & Certificat…4.3
• CVE-2026-11774An integer overflow flaw was found in the SASL I/O layer of …7.6