Users can generate Service Account tokens after permissions removal

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-33381 · Microsoft / collected KEV context

EUVD-2026-30146

GHSA-wfhv-mj62-f5xh

BIT-grafana-2026-33381

GO-2026-5708

cve-program · CVE-2026-33381

• https://grafana.com/security/security-advisories/cve-2026-33381

euvd · EUVD-2026-30146

• https://grafana.com/security/security-advisories/cve-2026-33381

nvd · CVE-2026-33381

• https://grafana.com/security/security-advisories/cve-2026-33381

osv · GHSA-wfhv-mj62-f5xh

• https://nvd.nist.gov/vuln/detail/CVE-2026-33381
• https://github.com/grafana/grafana/commit/fb7336fc36c14e1ff869482c5085ddb9f39e1b86
• https://github.com/grafana/grafana
• https://grafana.com/security/security-advisories/cve-2026-33381

osv · GO-2026-5708

• https://github.com/advisories/GHSA-wfhv-mj62-f5xh
• https://nvd.nist.gov/vuln/detail/CVE-2026-33381
• https://github.com/grafana/grafana/commit/fb7336fc36c14e1ff869482c5085ddb9f39e1b86
• https://grafana.com/security/security-advisories/cve-2026-33381

No related operational record is retained in the current change model.