Actively exploited vulnerabilities affecting Grafana Labs products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2021-43798https://wildfortech.com/security#CVE-2021-43798Grafana, a widely deployed open-source analytics and monitoring platform, contains a path traversal flaw that lets an unauthenticated attacker request URLs crafted to escape the web root and read arbitrary local files on the server. This means sensitive files — including configuration files potentially containing credentials or secrets — could be exposed without any login required, making this a high-priority risk for any organization running a vulnerable Grafana instance.Thu, 09 Oct 2025 00:00:00 GMTGrafana LabsGrafana