Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.3
grafana-fips could permit unauthorized access
published 21 days ago
Summary
The grafana-fips package in the cleanstart distribution contains a security flaw that may allow attackers to bypass permission checks. This could expose data or enable actions without proper approval. Apply the vendor's update or patch as soon as it is available.
What to do
- Update cleanstart grafana-fips to version 13.1.0-r1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | grafana-fips |
< 13.1.0-r1 Fix: upgrade to 13.1.0-r1
|
Original advisory text
OpenFGA is an authorization/permission engine built for developers
Security vulnerability affects the grafana-fips package. OpenFGA is an authorization/permission engine built for developers.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published15 Oct 2026
Updated15 Oct 2026
First seen15 Oct 2026
Sources
CLEANSTART-2026-IC81129 · OSV
Track software like this
Free during beta