FlawAtlas
Search the atlas
CVE-2026-33377 High

Dashboard Import Overwrites ACL — Editor Privilege Escalation to Dashboard Admin

An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate privilege.

Exploit probability 0.2%
Published May 15, 2026
Required by Not available
Last source change May 15, 2026

02 / AFFECTED SOFTWARE

Affected packages

Bitnami grafana
Unknown Unknown

9 explicit affected versions

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities BIT-grafana-2026-33377

An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate privilege.

View original source
Open Source Vulnerabilities CVE-2026-33377

An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate privilege.

View original source

05 / REFERENCES

Further evidence