« Volver al listado

CVE-2026-81842

Estado: Pendiente de análisisMedia (4.3)—

An authenticated user with edit permission on one folder can move a library panel into another folder where they only have view permission, through the library elements API or the equivalent App Platform resource. The update path did not check library panel create permission on the destination folder (incorrect authorization). No data from the destination folder is disclosed, and existing content there cannot be changed.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Usuario autenticado con permisos de edición eleva privilegios moviendo paneles a carpetas donde solo tiene vista; falla de autorización en la API permite acceso más allá de permisos asignados.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Privileged Account ManagementApplication Developer GuidanceActive Directory ConfigurationVulnerability ScanningUser TrainingUser Account Management

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-81842",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-81842",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-09-30T15:04:07.785889Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@grafana.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@grafana.com",
      "affectedData": [
        {
          "vendor": "Grafana",
          "product": "Grafana Enterprise",
          "versions": [
            {
              "status": "affected",
              "version": "12.1.0",
              "versionType": "semver",
              "lessThanOrEqual": "12.1.10"
            },
            {
              "status": "affected",
              "version": "12.2.0",
              "versionType": "semver",
              "lessThanOrEqual": "12.2.11"
            },
            {
              "status": "affected",
              "version": "12.3.0",
              "versionType": "semver",
              "lessThanOrEqual": "12.3.11"
            },
            {
              "status": "affected",
              "version": "12.4.0",
              "lessThan": "12.4.12",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "13.0.0",
              "lessThan": "13.0.10",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Grafana",
          "product": "Grafana OSS",
          "versions": [
            {
              "status": "affected",
              "version": "12.1.0",
              "versionType": "semver",
              "lessThanOrEqual": "12.1.10"
            },
            {
              "status": "affected",
              "version": "12.2.0",
              "versionType": "semver",
              "lessThanOrEqual": "12.2.11"
            },
            {
              "status": "affected",
              "version": "12.3.0",
              "versionType": "semver",
              "lessThanOrEqual": "12.3.11"
            },
            {
              "status": "affected",
              "version": "12.4.0",
              "lessThan": "12.4.12",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "13.0.0",
              "lessThan": "13.0.10",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2026-09-29T21:19:31.583",
  "references": [
    {
      "url": "https://grafana.com/security/security-advisories/cve-2026-81842",
      "source": "security@grafana.com"
    }
  ],
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@grafana.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-863"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An authenticated user with edit permission on one folder can move a library panel into another folder where they only have view permission, through the library elements API or the equivalent App Platform resource. The update path did not check library panel create permission on the destination folder (incorrect authorization). No data from the destination folder is disclosed, and existing content there cannot be changed."
    }
  ],
  "lastModified": "2026-09-30T17:23:08.953",
  "sourceIdentifier": "security@grafana.com"
}