CVE-2026-19197

Name of the Vulnerable Software and Affected Versions Grafana (affected versions not specified)

Description Broken access control allows a user with organization administrator permissions to delete dashboard snapshots belonging to other organizations hosted on the same instance. Additionally, an attacker can recover a snapshot's secret delete key using only its public share key.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.