CVE-2026-81841

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description Pausing a shared public dashboard fails to revoke its access token for endpoints that serve frontend bootstrap data. This missing authorization allows anyone with the link to a paused shared dashboard to retrieve the configuration of the dashboard's data sources without authentication, which may include stored credentials for data sources utilizing browser access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.