GrafanaGhost: The AI That Leaked Everything Without Being Hacked

GrafanaGhost is a disclosed vulnerability where attackers used indirect prompt injection and a URL-validation bypass to coerce Grafana's AI assistant into making outbound requests that leaked sensitive telemetry and customer data without credentials or triggering traditional security controls; Grafana patched the issue, but researchers warn this pattern affects many AI-enabled integrations and demands inventorying AI touchpoints, data-layer enforcement, and red-teaming of AI components.