UBUNTU-CVE-2026-33379: Ubuntu/check-mk vulnerability

Published Nov 6, 2026

Updated

A user with any role, including Viewer or a service account with no permissions, can create, externally publish, and delete dashboard snapshots (missing authorization). Only Grafana OSS and Grafana Enterprise 12.4 are affected; earlier versions and Grafana 13 are not.

Affected Software

2 affected components

ubuntu/check-mk*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Grafana OSS/Enterprise to a version that resolves this vulnerability.
Fixed in 13

Event History

Nov 6, 2026

CVE Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which deployments are affected?

Only Grafana OSS and Grafana Enterprise 12.4 are affected. Earlier versions and Grafana 13 are not affected.

What level of access does an attacker need?

Any authenticated user can exploit the issue, including a user with the Viewer role or a service account with no permissions. The attacker can create, externally publish, and delete dashboard snapshots.

UBUNTU-CVE-2026-33379: Ubuntu/check-mk vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which deployments are affected?

What level of access does an attacker need?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

What level of access does an attacker need?