Is Grafana 13.1.8 affected?
Oct 13, 2026 · Release notes ↗
2 known vulnerabilities affect 13.1.8 (highest CVSS 7.1).
5 newer releases in its track, up to 13.2.4. What changed up to 13.2.4
Vulnerabilities affecting 13.1.8
- 7.1 CVE-2026-14199 Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled (sync_ttl greater than zero) are affected. The Auth Proxy cache key concatenated the username and for… fixed in 13.2.0
- 4.3
Newer releases
| 13.2.4 | Oct 13, 2026 | 13.1.8 → 13.2.4 |
| 13.2.3 | Sep 29, 2026 | 13.1.8 → 13.2.3 |
| 13.2.2 | Sep 15, 2026 | 13.1.8 → 13.2.2 |
| 13.2.1 | Sep 2, 2026 | 13.1.8 → 13.2.1 |
| 13.2.0 | Aug 18, 2026 | 13.1.8 → 13.2.0 |