Security Advisory

CVE-2026-42129

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-22 13:18:27
Last updated 2026-07-24 12:23:06
Assigner GRAFANA
CVSS score 7.7
State PUBLISHED

Description

A user with Viewer permissions can use a path traversal in the Loki data source plugin to reach administrative Loki endpoints and read sensitive backend configuration and internal service information.