A critical client-side open redirect vulnerability, known as “the Grafana Ghost” (CVE-2025-4123), threatens over 46,000 Grafana instances with account takeover risks, as more than one-third remain unpatched since its discovery in May 2025.
View full story…