Grafana Mimir vulnerabilities

1 known vulnerability in Grafana Mimir from Grafana. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.7 High severity

  Enterprise Metrics (GEM): Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-81938Nov 2, 2026Grafana

  Grafana Mimir's Alertmanager rejects tenant-supplied receiver configurations that reference local files, but the check did not cover two HTTP client settings: http_headers.<name>.files and basic_auth.username_file. A tenant permitted to upload an Alertmanager