CVE-2026-75889 | Grafana Alloy up to 1.18.1 prometheus.operator.servicemonitors bearerTokenFile information disclosure

August 27, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Grafana Alloy up to 1.18.1. This issue affects some unknown processing of the component prometheus.operator.servicemonitors. Such manipulation of the argument bearerTokenFile leads to information disclosure.

This vulnerability is documented as CVE-2026-75889. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More