CVE-2024-9476 Privilege escalation vulnerability for Organizations in Grafana
Attackers can escalate privileges to access resources from other organizations in Grafana instances using the Cloud Migration Assistant.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2024-9476?
CVE-2024-9476 is a medium-severity vulnerability in Grafana OSS and Enterprise, published on 13 Nov 2024. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
A vulnerability in Grafana Labs Grafana OSS and Enterprise allows Privilege Escalation allows users to gain access to resources from other organizations within the same Grafana instance via the Grafana Cloud Migration Assistant.This vulnerability will only affect users who utilize the Organizations feature to isolate resources on their Grafana instance.
Weakness: CWE-266
Which versions are affected by CVE-2024-9476?
Linux distribution packages (1)
grafana openSUSE:Tumbleweed | All versions | 11.3.2-1.1 |
How do I fix CVE-2024-9476?
Apply the vendor's patch.
Is CVE-2024-9476 being exploited?
There is no known exploitation of CVE-2024-9476 in the wild and no public exploit code.
Sources
Also known as GHSA-h493-wm58-vgvj, UBUNTU-CVE-2024-9476, openSUSE-SU-2025:14681-1.