A vulnerability was found in Grafana and Grafana Enterprise up to 11.6.10/12.1.6/12.2.4/12.3.2 and classified as problematic. Affected is an unknown function of the component Public Dashboard. The manipulation results in information disclosure.

This vulnerability is reported as CVE-2026-21722. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.