Is CVE-2026-103506 being exploited?

No public exploit is currently tracked.

Back

CVE-2026-103506

Description

An authenticated user in Grafana can read SSO client secrets and modify instance-wide SSO settings without the required permissions (missing authorization). This affects Grafana OSS and Enterprise 13.2 installations with the experimental kubernetesSsoSettingsApi feature toggle enabled, which is disabled by default.