Skip to content
Sign in
7.3 High

CVE-2024-8975 Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to…

Description

Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Alloy: before 1.3.3, from 1.4.0-rc.0 through 1.4.0-rc.1.

Affected products and versions

Product Affected versions Fixed in
Alloy 1.4 1.4.0-rc.0 → 1.4.0-rc.1 No fix stated
Alloy 1.3 earliest → < 1.3.3 1.3.3

Other CVEs of Alloy

The 2 CVEs of Alloy →
CVE-2026-75889 Grafana Alloy’s prometheus.operator.servicemonitors component allows a user who can create or modify ServiceMonitor… 7.7 High
Track this CVE