{"id":"CVE-2026-21721","state":"PUBLISHED","title":"Dashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege Escalation","description":"The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management rights on one dashboard can read and modify permissions on other dashboards. This is an organization‑internal privilege escalation.","publishedAt":"2026-01-27T09:07:55.160Z","updatedAt":"2026-08-27T17:22:33.569Z","severity":{"score":8.1,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","source":"GRAFANA"},"assigner":"GRAFANA","products":["Grafana grafana/grafana","Grafana grafana/grafana-enterprise"],"affected":[{"vendor":"Grafana","product":"grafana/grafana","defaultStatus":"unaffected","versions":[{"version":"12.3.0","status":"affected","lessThan":"12.3.1","versionType":"semver"}]},{"vendor":"Grafana","product":"grafana/grafana","defaultStatus":"unaffected","versions":[{"version":"12.2.0","status":"affected","lessThan":"12.2.3","versionType":"semver"}]},{"vendor":"Grafana","product":"grafana/grafana","defaultStatus":"unaffected","versions":[{"version":"12.1.0","status":"affected","lessThan":"12.1.5","versionType":"semver"}]},{"vendor":"Grafana","product":"grafana/grafana","defaultStatus":"unaffected","versions":[{"version":"12.0.0","status":"affected","lessThan":"12.0.8","versionType":"semver"}]},{"vendor":"Grafana","product":"grafana/grafana","defaultStatus":"unaffected","versions":[{"version":"10.2.0","status":"affected","lessThan":"11.6.9","versionType":"semver"}]},{"vendor":"Grafana","product":"grafana/grafana-enterprise","defaultStatus":"unaffected","versions":[{"version":"10.2.0","status":"affected","lessThan":"11.6.9","versionType":"semver"}]},{"vendor":"Grafana","product":"grafana/grafana-enterprise","defaultStatus":"unaffected","versions":[{"version":"12.0.0","status":"affected","lessThan":"12.0.8","versionType":"semver"}]},{"vendor":"Grafana","product":"grafana/grafana-enterprise","defaultStatus":"unaffected","versions":[{"version":"12.1.0","status":"affected","lessThan":"12.1.5","versionType":"semver"}]},{"vendor":"Grafana","product":"grafana/grafana-enterprise","defaultStatus":"unaffected","versions":[{"version":"12.2.0","status":"affected","lessThan":"12.2.3","versionType":"semver"}]},{"vendor":"Grafana","product":"grafana/grafana-enterprise","defaultStatus":"unaffected","versions":[{"version":"12.3.0","status":"affected","lessThan":"12.3.1","versionType":"semver"}]}],"references":["https://grafana.com/security/security-advisories/cve-2026-21721","https://access.redhat.com/security/cve/CVE-2026-21721","https://bugzilla.redhat.com/show_bug.cgi?id=2433242","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21721.json","https://access.redhat.com/errata/RHSA-2026:3078","https://access.redhat.com/errata/RHSA-2026:2914","https://access.redhat.com/errata/RHSA-2026:3529","https://access.redhat.com/errata/RHSA-2026:2920","https://access.redhat.com/errata/RHSA-2026:41064","https://access.redhat.com/errata/RHSA-2026:5633","https://access.redhat.com/errata/RHSA-2026:8229"],"weaknesses":["CWE-863","CWE-639"],"ingestedAt":"2026-10-29T20:11:10.572Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/21xxx/CVE-2026-21721.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-21721","state":"PUBLISHED","datePublished":"2026-01-27T09:07:55.160Z","dateUpdated":"2026-08-27T17:22:33.569Z","assignerShortName":"GRAFANA","assignerOrgId":"57da9224-a3e2-4646-9d0e-c4dc2e05e7da","dateReserved":"2026-01-05T09:26:06.214Z"},"containers":{"cna":{"title":"Dashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege Escalation","descriptions":[{"lang":"en","value":"The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management rights on one dashboard can read and modify permissions on other dashboards. This is an organization‑internal privilege escalation."}],"affected":[{"vendor":"Grafana","product":"grafana/grafana","defaultStatus":"unaffected","versions":[{"version":"12.3.0","status":"affected","lessThan":"12.3.1","versionType":"semver"}]},{"vendor":"Grafana","product":"grafana/grafana","defaultStatus":"unaffected","versions":[{"version":"12.2.0","status":"affected","lessThan":"12.2.3","versionType":"semver"}]},{"vendor":"Grafana","product":"grafana/grafana","defaultStatus":"unaffected","versions":[{"version":"12.1.0","status":"affected","lessThan":"12.1.5","versionType":"semver"}]},{"vendor":"Grafana","product":"grafana/grafana","defaultStatus":"unaffected","versions":[{"version":"12.0.0","status":"affected","lessThan":"12.0.8","versionType":"semver"}]},{"vendor":"Grafana","product":"grafana/grafana","defaultStatus":"unaffected","versions":[{"version":"10.2.0","status":"affected","lessThan":"11.6.9","versionType":"semver"}]},{"vendor":"Grafana","product":"grafana/grafana-enterprise","defaultStatus":"unaffected","versions":[{"version":"10.2.0","status":"affected","lessThan":"11.6.9","versionType":"semver"}]},{"vendor":"Grafana","product":"grafana/grafana-enterprise","defaultStatus":"unaffected","versions":[{"version":"12.0.0","status":"affected","lessThan":"12.0.8","versionType":"semver"}]},{"vendor":"Grafana","product":"grafana/grafana-enterprise","defaultStatus":"unaffected","versions":[{"version":"12.1.0","status":"affected","lessThan":"12.1.5","versionType":"semver"}]},{"vendor":"Grafana","product":"grafana/grafana-enterprise","defaultStatus":"unaffected","versions":[{"version":"12.2.0","status":"affected","lessThan":"12.2.3","versionType":"semver"}]},{"vendor":"Grafana","product":"grafana/grafana-enterprise","defaultStatus":"unaffected","versions":[{"version":"12.3.0","status":"affected","lessThan":"12.3.1","versionType":"semver"}]}],"references":[{"url":"https://grafana.com/security/security-advisories/cve-2026-21721","tags":["vendor-advisory"]}],"metrics":[{"cvssV3_1":{"version":"3.1","baseScore":8.1,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"}}],"providerMetadata":{"shortName":"GRAFANA","orgId":"57da9224-a3e2-4646-9d0e-c4dc2e05e7da","dateUpdated":"2026-08-27T17:22:33.569Z"},"datePublic":"2026-01-27T09:05:28.422Z","source":{"discovery":"BUG_BOUNTY"},"x_generator":{"engine":"cvelib 1.8.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-01-28T04:55:19.556498Z","id":"CVE-2026-21721","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-863","type":"CWE","lang":"en","description":"CWE-863 Incorrect Authorization"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-26T21:45:54.908Z"}},{"title":"grafana/grafana/pkg/services/dashboards: Grafana Dashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege Escalation","descriptions":[{"lang":"en","value":"An authorization error has been discovered in Grafana dashboards. The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management rights on one dashboard can read and modify permissions on other dashboards. This is an organization‑internal privilege escalation."}],"affected":[{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","packageName":"grafana","defaultStatus":"affected","versions":[{"version":"0:10.2.6-22.el10_1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.1"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","packageName":"grafana","defaultStatus":"affected","versions":[{"version":"0:10.2.6-20.el10_0","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"grafana","defaultStatus":"affected","versions":[{"version":"0:10.2.6-18.el9_7","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","packageName":"grafana","defaultStatus":"affected","versions":[{"version":"0:10.2.6-17.el9_6","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.6"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.11","packageName":"rhacm2/acm-grafana-rhel9","defaultStatus":"affected","versions":[{"version":"1783578847","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:acm:2.11::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.12","packageName":"rhacm2/acm-grafana-rhel9","defaultStatus":"affected","versions":[{"version":"1774002166","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:acm:2.12::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.13","packageName":"rhacm2/acm-grafana-rhel9","defaultStatus":"affected","versions":[{"version":"1774950654","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:acm:2.13::el9"]},{"vendor":"Red Hat","product":"Multicluster Global Hub","packageName":"multicluster-globalhub/multicluster-globalhub-grafana-rhel9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:multicluster_globalhub"]},{"vendor":"Red Hat","product":"Red Hat Ceph Storage 5","packageName":"rhceph/grafana-rhel9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ceph_storage:5"]},{"vendor":"Red Hat","product":"Red Hat Ceph Storage 5","packageName":"rhel8/grafana","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ceph_storage:5"]},{"vendor":"Red Hat","product":"Red Hat Ceph Storage 5","packageName":"rhel9/grafana","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ceph_storage:5"]},{"vendor":"Red Hat","product":"Red Hat Ceph Storage 6","packageName":"rhceph/grafana-rhel9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ceph_storage:6"]},{"vendor":"Red Hat","product":"Red Hat Ceph Storage 6","packageName":"rhel8/grafana","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ceph_storage:6"]},{"vendor":"Red Hat","product":"Red Hat Ceph Storage 6","packageName":"rhel9/grafana","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ceph_storage:6"]},{"vendor":"Red Hat","product":"Red Hat Ceph Storage 8","packageName":"rhceph/grafana-rhel9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ceph_storage:8"]},{"vendor":"Red Hat","product":"Red Hat Ceph Storage 8","packageName":"rhel8/grafana","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ceph_storage:8"]},{"vendor":"Red Hat","product":"Red Hat Ceph Storage 8","packageName":"rhel9/grafana","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ceph_storage:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"grafana","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"]}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-21721","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2433242","name":"RHBZ#2433242","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21721.json","tags":["x_sadp-csaf-vex"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3078","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:2914","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3529","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:2920","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:41064","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:5633","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8229","tags":["vendor-advisory","x_refsource_REDHAT"]}],"metrics":[{"other":{"content":{"namespace":"https://access.redhat.com/security/updates/classification/","value":"Important"},"type":"Red Hat severity rating"}},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-639","description":"Authorization Bypass Through User-Controlled Key","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"redhat-SADP","orgId":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","dateUpdated":"2026-07-20T12:04:51.023Z"},"datePublic":"2026-01-27T09:07:55.160Z","solutions":[{"lang":"en","value":"RHSA-2026:3078: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:2914: Red Hat Enterprise Linux AppStream (v. 10)"},{"lang":"en","value":"RHSA-2026:3529: Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:2920: Red Hat Enterprise Linux AppStream (v. 9)"},{"lang":"en","value":"RHSA-2026:41064: Red Hat Advanced Cluster Management for Kubernetes 2.11"},{"lang":"en","value":"RHSA-2026:5633: Red Hat Advanced Cluster Management for Kubernetes 2.12"},{"lang":"en","value":"RHSA-2026:8229: Red Hat Advanced Cluster Management for Kubernetes 2.13"}],"timeline":[{"lang":"en","time":"2026-01-27T10:02:34.317Z","value":"Reported to Red Hat."},{"lang":"en","time":"2026-01-27T09:07:55.160Z","value":"Made public."}],"workarounds":[{"lang":"en","value":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"x_adpType":"supplier","x_generator":{"engine":"sadp-cli 1.0.0"}}]}}}