https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-29T03:50:15.856069+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-10601 CVE-2026-10601 — Path traversal in the Tempo and Loki data source plugins 2026-09-29T03:50:15.870043+00:00

Affected: Grafana OSS

A user with Viewer permissions can use specially crafted requests to the Tempo and Loki data source plugins to reach unintended backend endpoints. Depending on the backend configuration this can expose data source credentials, leak internal responses, or trigger administrative actions on the configured backend.