CVE-2026-33380: SQL Expressions Read File From Disk
A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable the sqlExpressions feature toggle, since only instances with the sqlExpressions feature toggle enabled are vulnerable to arbitrary file reads from the Grafana server filesystem.
Grafana sqlExpressions feature toggle = disable
Event History
Frequently Asked Questions
What is the severity of CVE-2026-33380?
CVE-2026-33380 is considered a critical severity vulnerability due to its potential for unauthorized file access on the Grafana server.
How do I fix CVE-2026-33380?
To remediate CVE-2026-33380, disable the sqlExpressions feature toggle in your Grafana instance.
Who is affected by CVE-2026-33380?
CVE-2026-33380 affects authenticated users of the Grafana server where the sqlExpressions feature is enabled.
What attacker capabilities does CVE-2026-33380 provide?
CVE-2026-33380 allows an authenticated attacker to read arbitrary files from the server's filesystem.
Is CVE-2026-33380 currently being actively exploited?
As of now, there are no specific reports indicating that CVE-2026-33380 is being actively exploited in the wild.