Summary

The release fixes CVE-2026-15815, CVE-2026-76154 and CVE-2026-79656. It also preserves query-variable refresh settings during v2 dashboard import and fixes a folder-rename UID collision during full provisioning synchronisation.

Why it matters

Grafana operators need to apply the coordinated release to address vulnerabilities in a widely deployed observability platform.

Sources