CVE

CVE-2025-6197

4.2

CVSSmedium

Exploitable remotely over the internet · no authentication required · user interaction needed.

Description

An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation: - Multiple organizations must exist in the Grafana instance - Victim must be on a different organization than the one specified in the URL

Attack Vector

Network

Privileges Req.

None

User Interaction

Required

grafana

Updated Nov 10, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~10 seconds

Open Redirect via Organization Switching

An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation Multiple organizations must exist in the Grafana instance - Victim must be on a different organization than the one specified in the URL References: https://grafana.com/blog/2025/07/17/grafana-security-release-medium-and-high-severity-fixes-for-cve-2025-6197-and-cve-2025-6023/ https://nvd.nist.gov/vuln/detail/CVE-2025-6197

10 assets checked · domain, subdomain, ipv4

Scanner page →Run scanner

CVE history: grafana

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →