Grafana Labs
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Grafana Databricks Datasource Plugin | 1 | – | Nov 11, 2025 |
| Grafana OSS and Enterprise | 1 | – | Nov 13, 2024 |
| Grafana Snowflake Datasource Plugin | 1 | – | Nov 11, 2025 |
Exploited and recent CVEs
- CVE-2025-41116 Incorrect oauth passthrough in Grafana Databricks Datasource 0.3%
- CVE-2025-3717 Incorrect oauth passthrough in Grafana Snowflake Datasource 0.3%
- CVE-2024-9476 Privilege escalation vulnerability for Organizations in Grafana 0.2%