Grafana's AI Assistant Had a Prompt Injection Flaw That Could Have Exposed Sensitive Data
Security vendor Noma disclosed 'GrafanaGhost,' an indirect prompt injection vulnerability in Grafana's AI assistant that could silently exfiltrate user data. Grafana has since patched the underlying image renderer flaw.