CVE-2026-8595 | Grafana up to 12.4.3/13.0.1 TableNG Panel field name cross site scripting

A vulnerability has been found in Grafana up to 12.4.3/13.0.1 and classified as problematic. The impacted element is an unknown function of the component TableNG Panel. This manipulation of the argument field name causes cross site scripting.

This vulnerability is tracked as CVE-2026-8595. The attack is possible to be carried out remotely. No exploit exists.