Critical Security Flaw in Grafana: IPv6 Host Literal Parsing Issue
Summary
RLSA-2026:6344: Important: grafana security update. Affects grafana versions < 0:10.2.6-23.el10_1. Fixed in 0:10.2.6-23.el10_1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Grafana is an open-source, feature-rich metrics dashboard and graph editor designed for visualizing time series data from various sources such as Graphite, InfluxDB, and OpenTSDB. It is widely used for monitoring and analyzing system performance, making it a critical tool for many organizations. However, a recent security vulnerability has been identified that affects the way Grafana parses IPv6 host literals, potentially exposing users to security risks.
Vulnerability Detail
The vulnerability, identified as CVE-2026-25679, originates from an incorrect parsing mechanism in the net/url package used by Grafana. This flaw can lead to improper handling of IPv6 addresses, which may allow attackers to exploit the system by manipulating URL inputs. The ramifications include unauthorized access and potential data breaches, making it imperative for users to address this issue promptly.
How To Fix
Minimum fixed version
0:10.2.6-23.el10_1
This is the first release that contains the fix.
sudo dnf update grafanaTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid using IPv6 addresses in their configurations until the update is applied. This may help mitigate the risk while waiting for the official patch.
Conclusion
The identified vulnerability in Grafana poses a significant risk due to improper parsing of IPv6 host literals. Users are strongly advised to update to the latest patched version to mitigate potential security threats. Regular monitoring of vulnerabilities using tools like Vulert can help maintain the security of your applications.
See every vulnerability recorded for grafana →
FAQ
CVE-2026-25679 is a security vulnerability in Grafana that involves incorrect parsing of IPv6 host literals, which can lead to security risks.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The vulnerability can lead to unauthorized access and data breaches, posing significant risks to the integrity and confidentiality of your data.
Yes, a patch is available in the form of an updated package version 0:10.2.6-23.el10_1, which users should install immediately.
The CVSS score for this vulnerability is 7.5, indicating a high level of severity.
Related vulnerabilities
Recent vulnerabilities recorded for grafana.
