CVE-2025-41115

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 21, 2025

Last Seen

November 24, 2025

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Grafana SCIM Vulnerability Allows Privilege Escalation53.2

Grafana Labs has issued critical patches for a severe vulnerability, CVE-2025-41115, affecting Grafana Enterprise versions 12.0.0 to 12.2.1. The flaw in the SCIM provisioning feature could enable attackers to escalate privileges or impersonate users if specific configurations are enabled. Organizati...

Critical Grafana SCIM Vulnerability Allows Privilege Escalation52.9

Grafana Labs has issued critical patches for a severe vulnerability (CVE-2025-41115) in its SCIM provisioning feature, which could enable attackers to escalate privileges or impersonate users. The flaw affects Grafana Enterprise versions 12.0.0 through 12.2.1 when specific configurations are enabled...