CVE-2025-6197

An open redirect vulnerability has been identified in Grafana OSS organization switching functionality.Prerequisites for exploitation:- Multiple organizations must exist in the Grafana instance- Victim must be on a different organization than the one specified in the URL

CVSS v3.1

4.2 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

EPSS

70.15% chance of exploitation in the next 30 days, 99th percentile

Nuclei

medium

Published

2025-07-18

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-6197.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2025-6195
• CVE-2025-61984
• CVE-2025-61925
• CVE-2025-6200
• CVE-2025-61922
• CVE-2025-6202