CVE-2026-42129 — Path traversal in the Loki data source plugin
A user with Viewer permissions can use a path traversal in the Loki data source plugin to reach administrative Loki endpoints and read sensitive backend configuration and intern…
Published: 2026-06-22 · CVSS: 7.7 · CVSS 3.1
A user with Viewer permissions can use a path traversal in the Loki data source plugin to reach administrative Loki endpoints and read sensitive backend configuration and internal service information.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7