Grafana Token Minting Access Revocation Delay Vulnerability

A vulnerability exists in Grafana that allows users to continue minting tokens for a service account for a few seconds after their access has been revoked. This issue arises because the revocation process does not take immediate effect, creating a brief window of opportunity for unauthorized token minting.

Impact

Exploitation of this vulnerability could lead to unauthorized token minting, allowing users to gain access or privileges they should no longer have.