9.6
Critical
CVE-2026-28381 The Snowflake datasource allows for GET/PUT commands, which can allow any user with access to run queries against the…
Description
The Snowflake datasource allows for GET/PUT commands, which can allow any user with access to run queries against the data source to read/write files between the local grafana server and the connected Snowflake host.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Snowflake Datasource 1.14 | 1.14.7 → 1.14.12 | No fix stated |