Incorrect privilege assignment

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-41115 · Microsoft / collected KEV context

EUVD-2025-198492

GHSA-w62r-7c53-fmc5

BIT-grafana-2025-41115

GO-2025-4153

cve-program · CVE-2025-41115

• https://grafana.com/security/security-advisories/cve-2025-41115

euvd · EUVD-2025-198492

• https://grafana.com/security/security-advisories/cve-2025-41115

nvd · CVE-2025-41115

• https://grafana.com/security/security-advisories/cve-2025-41115

osv · GHSA-w62r-7c53-fmc5

• https://nvd.nist.gov/vuln/detail/CVE-2025-41115
• https://github.com/grafana/grafana/commit/ca5d89812015ef2db3acc62826f73650450b331e
• https://github.com/advisories/GHSA-w62r-7c53-fmc5
• https://github.com/grafana/grafana
• https://github.com/grafana/grafana/releases/tag/v12.0.7
• https://github.com/grafana/grafana/releases/tag/v12.1.4
• https://github.com/grafana/grafana/releases/tag/v12.2.2
• https://github.com/grafana/grafana/releases/tag/v12.3.0
• https://grafana.com/security/security-advisories/CVE-2025-41115

osv · GO-2025-4153

• https://github.com/advisories/GHSA-w62r-7c53-fmc5
• https://nvd.nist.gov/vuln/detail/CVE-2025-41115
• https://github.com/grafana/grafana/commit/ca5d89812015ef2db3acc62826f73650450b331e
• https://github.com/grafana/grafana/releases/tag/v12.0.7
• https://github.com/grafana/grafana/releases/tag/v12.1.4
• https://github.com/grafana/grafana/releases/tag/v12.2.2
• https://github.com/grafana/grafana/releases/tag/v12.3.0

No related operational record is retained in the current change model.