cvedb.io
CVE-2026-33381
MEDIUM · CVSS 5.9
EPSS exploitation probability: 0%
Published 2026-05-13T20:16:20.803 · Last modified 2026-06-17T13:20:16.993

Summary

When a user's access to mint tokens for a service account is revoked, it is sometimes still possible to do so for a few seconds after the event. The user will eventually lose access to do this.

Affected products

grafana — grafana

Does this affect you?

Add your gear to cvedb and we'll alert you only when grafana ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.