CVE-2026-79656

Published 28 October 2026 · tracked since 29 October 2026

Description

A user with read access to Grafana's server logs, or to a log store they are shipped to, can recover the OAuth and OIDC access, refresh and ID tokens of users who sign in through the Generic OAuth, Google or GitLab providers. Grafana writes these tokens to its logs unredacted when an access or ID to

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-118683 HIGH 8.8
• CVE-2026-118680 MEDIUM 4.4
• CVE-2026-118645 HIGH 8.7
• CVE-2026-118265 MEDIUM 5.3
• CVE-2026-118641 HIGH 7.5
• CVE-2026-118257 HIGH 7.2
• CVE-2026-106484 MEDIUM 4.4
• CVE-2026-110181 MEDIUM 6.5
• CVE-2026-105620 MEDIUM 6.5
• CVE-2026-105613 MEDIUM 4.7

→ Open the live CVE board · all tools