Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
The Snowflake datasource allows for GET/PUT commands, which can allow any user with access to run queries against the data source to read/write files between the local grafana server and the connected Snowflake host.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-22 | 3 | Disclosure1General1Patch1 |
| 2026-07-06 | 1 | General1 |
⚠️ Vulnerabilidades en productos Grafana ❗ CVE-2026-42129 ❗ CVE-2026-42127 ❗ CVE-2026-28381 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-grafana-3/ https://t.co/v2oT4mgkhB
Post summary
The tweet lists three Grafana-related CVE identifiers and directs readers to external URLs for more information, but provides no technical details or actionable guidance within the post itself.
Attention, elevated activities detected targeting Grafana Snowflake Datasource (CVE-2026-28381) https://vuldb.com/vuln/372678/cti
Post summary
The post alerts on heightened activity targeting Grafana Snowflake Datasource CVE‑2026‑28381 but offers no technical, exploit, or mitigation details.
#CVE-2026-28381 - Critical supply chain attack in #Grafana. Snowflake datasource GET/PUT commands allow file read/write between server and host. #CVSS 9.6. Restrict access immediately. #CVE @grafana #InfoSec #linux #devsecops #devops #sysadmin More info: https://www.valtersit.com/cve/CVE-2026-28381/
Post summary
The tweet alerts to a critical supply‑chain vulnerability in Grafana (CVE-2026-28381) that enables file read/write via Snowflake datasource commands, and links to a page for more details.
🚨Critical - Grafana Snowflake Datasource Arbitrary File Read/Write (CVE-2026-28381) The Snowflake datasource in Grafana allows GET/PUT commands. Any user with query access to the datasource can read and write arbitrary files between the Grafana server and the connected Snowflake host. Severity: Critical (CVSS 9.6) 👉Affected: Grafana with Snowflake datasource plugin Action: Update the Snowflake datasource plugin or restrict datasource access.
Post summary
The post announces a critical CVE in Grafana’s Snowflake datasource that allows arbitrary file read/write via GET/PUT commands, urging users to update the plugin or limit access.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | grafana | snowflake | - | - | - |