Grafana 13.2.4

Grafana 13.2.4 was released on October 13, 2026. It is a maintenance update on the 13.2 branch that bundles five security fixes, a set of Provisioning and Git Sync improvements, and a short list of bug fixes. There are no breaking changes and no configuration migration is required for standard deployments.

Overview

The release follows 13.2.2 on the same branch and continues the project pattern of shipping security remediation alongside incremental product work. The build is available from the official Grafana download page, and the release post links to the What is new highlights page for the 13.x line.

Security

• CVE-2026-15577 - addressed in this release.
• CVE-2026-33374 - addressed in this release.
• CVE-2026-93294 - addressed in this release.
• CVE-2026-95502 - addressed in this release.
• CVE-2026-92539 - IAM, SCIM; fixed for Enterprise deployments.

Note the pattern here: four CVEs plus a fifth that is scoped to the Enterprise SCIM integration. Operators running Grafana Enterprise should treat that last entry as mandatory rather than optional.

New Features And Enhancements

• Alerting - sensitive headers are now stripped from oauth2 cross host redirects, closing a credential leak path in webhook and contact point configuration.
• Dashboard - the UI falls back gracefully when collection deletion is not supported by the backend.
• Git Sync - repository links are clarified when the repository is pure Git rather than a hosted forge.
• Provisioning - resource previews are allowed in unsynced folders, invalid resource names are rejected before any API calls are made, and the Pull status panel now shows the last checked time.
• Provisioning - PR previews are skipped for pull requests from forks, previews are stopped when refs disappear, and the terminal sync status is written back to the repository when a sync job fails early.
• Provisioning - legacy paths are supported and missing source annotations are diagnosed, and Git Sync polling intervals are respected after unchanged refs.

Deprecations

No deprecations are announced with this release, and no APIs are marked for removal on the 13.2 branch.

How To Upgrade

Upgrade through your normal path. Package users can update the grafana package from the official repositories, container users can pull the 13.2.4 tag, and Kubernetes users can bump the chart image reference. Back up your database and provisioning repository first, as always, then restart the instance and confirm the advisories disappear from your scanner output.