15 Vulnerabilities in a Grafana Monitoring Stack (And How We Found Them)

The views and opinions expressed on this site are my own and do not reflect the views of my employer. This content is based entirely on publicly available documentation for open-source tools and does not contain proprietary information from any current or former employer. ⚠️ Controlled Lab Environment — Not for Production Use All techniques demonstrated in this post were performed in an isolated personal homelab environment. Do not replicate these techniques against systems you do not own or have explicit authorization to test. The configurations shown are deliberately insecure for educational purposes. Always test in non-production environments. ...

February 15, 2026 · 35 min · Oob Skulden™