Security Advisory

CVE-2026-28381

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-22 13:20:29

Last updated 2026-06-24 15:58:25

Assigner GRAFANA

CVSS score 9.6

State PUBLISHED

Description

The Snowflake datasource allows for GET/PUT commands, which can allow any user with access to run queries against the data source to read/write files between the local grafana server and the connected Snowflake host.

← Browse all CVEs View on cve.org ↗