CVE-2026-9703: Grafana's data source proxy did not apply role-based access control to Loki write requests, so a Viewer-only account could create, modify or delete Loki alerting rules affecting every user of that data source. Releases through 13.0.3 are affected. Update to 13.0.4 or the patched maintenance release. https://www.cve.org/CVERecord?id=CVE-2026-9703 #infosec #cybersecurity