Token Minting Vulnerability in Grafana Software

CVE-2026-33381

What is CVE-2026-33381?

This vulnerability arises when a user's permission to mint tokens for a service account is revoked, yet they may still manage to do so for a brief period afterward. Although access is ultimately terminated, this window of opportunity could be exploited, posing security risks for affected systems. Organizations utilizing Grafana versions mentioned should evaluate their configurations and implement necessary mitigations to secure their environments against unauthorized token minting activities.

References