critical9.6
CVE-2026-28381
The Snowflake datasource allows for GET/PUT commands, which can allow any user with access to run queries against the data source to read/write files between t…
Impact
The Snowflake datasource allows for GET/PUT commands, which can allow any user with access to run queries against the data source to read/write files between the local grafana server and the connected Snowflake host.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Grafana | Snowflake | from 1.14.7 through 1.14.12 |