Grafana:
Exploitation
Read files unauthenticated via path traversal CVE-2021-43798
1 guide
•
Created Apr 4, 2026
•
Updated Sep 14, 2026
Grafana Directory Traversal (CVE-2021-43798)
Exploits Grafana's path traversal flaw to read arbitrary files outside the web root via crafted plugin endpoint requests, bypassing authentication.