无摘要

Summary

An authenticated organization user who can create or edit alert rules in a folder can query a datasource for which they do not have datasources:query permission. The attacker sets the client-controlled query field queryType to expr while retaining the UID of a real datasource.

The alert-rule authorization path treats the query as a server-side expression and skips datasource permission enforcement, while the evaluator subsequently resolves and executes the query against the real datasource identified by datasourceUid.

Impact

This bypass can expose data accessible through Grafana's configured datasource credentials to a low-privileged user who is not authorized to query that datasource directly. Confidentiality impact is High.

Integrity impact is Low because some datasource backends and configured credentials may permit state-changing queries. No availability impact has been demonstrated.

Attack prerequisites

• Authenticated, low-privileged user in the same Grafana organization
• Permission to create or edit alert rules in an accessible folder
• No datasources:query permission for the targeted datasource
• Knowledge or discovery of the targeted datasource UID
• No user interaction required

Technical details / root cause

1. The attacker submits an alert-rule query with queryType: "expr" and the UID of a real datasource.
2. The datasource authorization helper skips permission enforcement when query.QueryType == "expr".
3. queryType is client-controlled and is not validated against the referenced datasource.
4. During evaluation, Grafana selects and loads the actual datasource using DatasourceUID, not the spoofed queryType.
5. The query therefore executes using Grafana's datasource credentials despite the caller lacking datasources:query.

The root cause is inconsistent query classification between authorization and execution: authorization trusts queryType, while execution trusts DatasourceUID.

Affected product / component

• Product: Grafana OSS
• Component: Unified Alerting / ngalert
• Area: Alert-rule datasource authorization and query evaluation