Grafana Patches CVSS 10.0 SCIM Flaw Enabling Impersonation and Privilege Escalation

Back Thehackernews

Grafana Patches CVSS 10.0 SCIM Flaw Enabling Impersonation and Privilege Escalation

Thehackernews •[email protected] (The Hacker News) • November 21, 2025

Share: View original

Your patch pipeline shouldn't be a gamble — build the guardrails that keep speed from becoming risk.

Learn how to protect cloud workloads, control access, and meet compliance requirements — without slowing innovation.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Grafana SCIM Vulnerability Allows Privilege Escalation Grafana Labs has issued critical patches for a severe vulnerability (CVE-2025-41115) in its SCIM provisioning feature, which could enable attackers to escalate privileges or impersonate users. The flaw affects Grafana Enterprise versions 12.0.0 through 12.2.1 when specific configurations are enabled. Organizations are urged to update immediately to mitigate risks associated with this critical vulnerability. 6 sources 53

Extracted Entities

Companies (1)

Vulnerabilities (1)