https://blog.msnieman.com/tags/grafana/Recent content in Grafana on Myles Nieman — BlogHugoen-usTue, 17 Feb 2026 00:00:00 +0000https://blog.msnieman.com/writeups/data/Tue, 17 Feb 2026 00:00:00 +0000https://blog.msnieman.com/writeups/data/An unauthenticated Grafana path-traversal (CVE-2021-43798) exposes the SQLite database, leaking PBKDF2 password hashes that crack to yield SSH access; a privileged Docker container is then used to mount the host disk and read the root flag.