Improper authorization control for web services In github.com/grafana/grafana
Description
Grafana: Users can generate Service Account tokens after permissions removal When a user's access to mint tokens for a service account is revoked, it is sometimes still possible to do so for a few seconds after the event. The user will eventually lose access to do this.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel8 | - | - | |
rpm rhel9 | - | - | |
rpm rhel10 | - | - | |
 go | 1.9.2-0.20260513165311-fb7336fc36c1 |
Aliases
1. 2. 3. 4.
References
1. 2.