Pyroscope is an open-source continuous profiling database. The database supports various storage backends, including Tencent Cloud Object Storage (COS). If the database is configured to use Tencent COS as the storage backend, an attacker could extract the secret_key configuration value from the Pyroscope API. To exploit this vulnerability, an attacker needs direct access to the Pyroscope API. We highly recommend limiting the public internet exposure of all our databases, such that they are only accessible by trusted users or internal systems. This vulnerability is fixed in versions: 1.15.x: 1.15.2 and above. 1.16.x: 1.16.1 and above. 1.17.x: 1.17.0 and above (i.e. all versions). Thanks to Théo Cusnir for reporting this vulnerability to us via our bug bounty program.
The vulnerability stems from improper access permissions (CWE-732) — the secret_key value of the Tencent COS configuration is exposed through the Pyroscope API without appropriate access controls. An attacker with direct network access to the API can make an appropriate request and read the sensitive configuration value in plain text. The exploit does not require authentication or any privileges on the attacker's side.
An attacker can obtain the secret key (secret_key) for a Tencent COS resource, which may lead to unauthorized access to data stored in the cloud, modification or exfiltration of data. This results in high risk of data confidentiality and integrity breach.
Update Grafana Pyroscope to version: 1.15.2 or newer (1.15.x branch), 1.16.1 or newer (1.16.x branch), 1.17.0 or newer (1.17.x branch). Additionally, the manufacturer recommends restricting the exposure of Pyroscope API to the public internet — access should only be possible for trusted users or internal systems.
Grafana Pyroscope in branches: 1.15.x (below 1.15.2), 1.16.x (below 1.16.1) — only instances configured with Tencent Cloud Object Storage (COS) backend
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NGrafana Pyroscope
APPGrafana1.16.0< 1.15.2
Related vulnerabilities
Grafana – ominięcie uwierzytelnienia i nieuprawniony dostęp do snapshotów
Nieautoryzowany odczyt/zapis plików przez Snowflake datasource w Grafana
RCE w Grafana przez SQL Expressions i plugin Enterprise (CVE-2026-27876)
Grafana Enterprise: privilege escalation przez SCIM provisioning (LPE)
Grafana: command injection i local file inclusion przez SQL Expressions (duckdb)