Skip to content
lokiGO-2026-5115

Grafana Loki Path Traversal - CVE-2021-36156 Bypass in github.com/grafana/loki

Medium5.3CVE-2026-21726 · Published Jun 25, 2026 · updated Jul 7, 2026

Source advisory

Affected versions

PackageAffectedFixed in
github.com/grafana/loki
Go
all versionsNo fix yet

Changes since it was listed

DateChange
Sep 25Severity: Unrated to Medium
Details and references

Grafana Loki Path Traversal - CVE-2021-36156 Bypass in github.com/grafana/loki

CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Severity from
NVD
Also known as
CVE-2026-21726, GHSA-497x-rrr9-68jp

More loki advisories

All
DateAdvisory
Sep 22021Path traversal in Grafana Loki
CVE-2021-36156Medium5.3fixed in 2.3.0

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.