Volerion logoVolerion
Volerion logoVolerion

Grafana SQL Expressions Feature Remote Code Execution Vulnerability

Vulnerability

A remote code execution vulnerability has been identified in Grafana instances with the SQL Expressions feature toggle enabled. This vulnerability arises from a chained attack involving SQL Expressions and a Grafana Enterprise plugin, exploiting a feature available in Grafana Open Source. All users are advised to update Grafana to prevent potential exploitation through this vector.

Impact

Exploitation of this vulnerability allows for remote arbitrary code execution on the affected Grafana instance.

Added: Mar 27, 2026, 4:00 PM
Updated: Mar 27, 2026, 4:00 PM

Vulnerability Rating

Custom Algorithm
spread
6.2
impact
10.0
exploitability
6.2
remediation
8.3
relevance
4.8
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.