CVE-2025-41116

The record

When using the Grafana Databricks Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it  could result in  the wrong user identifier being used, and information for which the viewer is not authorized being returned.  This issue affects Grafana Databricks Datasource Plugin: from 1.6.0 before 1.12.0

Affected packages

Related vulnerabilities

• CVE-2026-15366 A control logic defect in a specific built-in webpage of Kids Mode allows users to view… CWE-653
• CVE-2026-62246 Kamaji is the Hosted Control Plane Manager for Kubernetes. CWE-653
• GHSA-gqmf-56h7-rrpf npm PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware… CWE-653
• CVE-2026-41155 An attacker could cooperatively pass data from one secure GPU process to another secure… CWE-653
• CVE-2026-42782 Improper Isolation or Compartmentalization vulnerability in Apache Syncope. CWE-653
• CVE-2026-44009 vm2 is an open source vm/sandbox for Node.js. CWE-653
• CVE-2026-44005 vm2 is an open source vm/sandbox for Node.js. CWE-653
• CVE-2026-43997 vm2 is an open source vm/sandbox for Node.js. CWE-653