Wingetlywingetly
← All apps

GrafanaOSS

by Grafana Labsv13.2.2

Last updated

Grafana allows you to query, visualize, alert on and understand your metrics no matter where they are stored. Create, explore, and share dashboards with your team and foster a data driven culture.

Visit homepage

Install with winget

$ winget install --id GrafanaLabs.Grafana.OSS --exact --version 13.2.2

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Silent install command for GrafanaOSS

GrafanaOSS uses MSI (WiX). The silent install switches are /quiet /norestart.

One-line silent install (x64, machine scope)
msiexec.exe /i grafana_13.2.2_34846740809_windows_amd64.msi /quiet /norestart

See the full silent install reference for GrafanaOSS →

Built by Pckgr

For Intune admins

Stop chasing app updates. Pckgr patches them for you.

Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.

Start free 30-day trial

No credit card required.

About

Grafana allows you to query, visualize, alert on and understand your metrics no matter where they are stored.

Create, explore, and share dashboards with your team and foster a data driven culture.

Installers · v13.2.2

ArchitectureTypeScopeInstallDownload
x64MSI
WiX
machineDirect

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

25 known CVEs via NVD

  • medium5.3Patched in wingetCVE-2026-8609affects before 11.6.15, 12.2.9, 12.3.7, +2 moreJul 10, 2026

    An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values, causing unbounded memory growth that can eventually exhaust memory and crash the Grafana instance (denial of service).

    Vendor advisory
  • medium6.8Patched in wingetCVE-2026-8595affects before 12.4.4, 13.0.2Jul 10, 2026

    A user with Editor permissions can craft a dashboard whose table (TableNG) panel contains a malicious field name that executes as a script in the browser of any user who views the dashboard (stored cross-site scripting).

    Vendor advisory
  • high7.5Patched in wingetCVE-2026-33382affects before 11.6.15, 12.2.9, 12.3.7, +2 moreJul 10, 2026

    Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. An attacker can send very large payloads that force excessive memory allocation, potentially exhausting memory and causing a denial of service.

    Vendor advisory
  • low3.1Patched in wingetCVE-2026-28378affects >=12.2.0 and <=12.2.7Jul 7, 2026

    The public dashboard deletion endpoint does not enforce organization isolation, allowing an Org Admin in one organization to delete public dashboards belonging to a different organization by supplying the target dashboard's identifiers.

  • high7.5Patched in wingetCVE-2026-42127affects >=12.4.0 and <=12.4.3Jun 22, 2026

    The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attackers to trigger excessive memory allocation by sending arbitrarily large JSON payloads. This can lead to denial of service through memory exhaustion. No valid da...

  • high7.3Patched in wingetCVE-2026-9029affects v12.4.0Jun 22, 2026

    The geomap panel's XYZ tile layer has a sanitize-then-interpolate ordering bug. sanitizeTextPanelContent() runs on the raw template string before getTemplateSrv().replace() substitutes the variable value, which uses the glob format with no HTML escaping. The result is passed to...

  • medium5.4Patched in wingetCVE-2026-10601affects v11.6.0Jun 22, 2026

    The Tempo and Loki datasource plugins construct backend HTTP requests by interpolating user-supplied input into URL paths without sanitization, enabling path traversal. A Viewer-role user can: (1) capture admin-configured datasource credentials (secureJsonData custom headers) by...

  • medium6.5Patched in wingetCVE-2026-28376affects before 11.6.14, 12.2.8, 12.3.6, 12.4.3May 13, 2026

    The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. An authenticated user with access to the Grafana Live API can trigger this issue.

    Vendor advisory
Showing 8 of 25. Source: NVD, updated 4h ago. Patch status is best-effort: NVD's fix version is compared against the latest version in winget, but the two version formats don't always align. Confirm with the vendor advisory before treating any specific build as safe.

See a CVE that affects your fleet? Push the patched version to Intune in one click with Pckgr - automated patching is the only way to keep up.

Related apps

  • k6Grafana Labs
    GrafanaLabs.k6v2.2.0

    A modern load testing tool, using Go and JavaScript.

  • k6 StudioGrafana Labs
    GrafanaLabs.k6Studiov2.0.2

    Desktop application designed to help you generate k6 test scripts

  • AlloyGrafana Labs
    GrafanaLabs.Alloyv1.19.0

    Grafana Alloy

  • GrafanaEnterpriseGrafana Labs
    GrafanaLabs.Grafana.Enterprisev13.2.2

    Grafana allows you to query, visualize, alert on and understand your metrics no matter where they are stored. Create, explore, and share dashboards with your team and foster a data driven culture.

  • F
    FlintGrafana Labs
    GrafanaLabs.Flintv0.22.12

    Fast, simple linting that doesn't slow down your AI coding

  • Wondershare RecoveritWondershare Software Co.,Ltd.
    Wondershare.Recoveritv14.5.2.6

    Quickly restore precious documents, emails, and other files.

More from Grafana Labs or browse dashboard, data, grafana.

Frequently asked questions

How do I install GrafanaOSS on Windows?
Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id GrafanaLabs.Grafana.OSS --exact --version 13.2.2. winget downloads the installer from Grafana Labs and runs it. Requires Windows 10 (1809+) or Windows 11.
How do I install GrafanaOSS silently for unattended deployment?
Add --silent and accept the agreements upfront: winget install --id GrafanaLabs.Grafana.OSS --exact 13.2.2 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.
What are the silent install switches for GrafanaOSS?
GrafanaOSS uses MSI (WiX). Run the downloaded installer with: msiexec.exe /i grafana_13.2.2_34846740809_windows_amd64.msi /quiet /norestart. The silent switches are /quiet /norestart.
How do I uninstall GrafanaOSS via winget?
Run: winget uninstall --id GrafanaLabs.Grafana.OSS --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from GrafanaOSS's Apps & Features entry.
Is GrafanaOSS free?
GrafanaOSS is distributed under AGPL-3.0. Refer to the publisher (https://grafana.com/) for the full license terms - Wingetly itself does not charge for installation.
Does GrafanaOSS work on Windows 10?
Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls GrafanaOSS directly from the publisher.
How do I keep GrafanaOSS up to date?
Run winget upgrade --id GrafanaLabs.Grafana.OSS --exact, or winget upgrade --all to update everything winget tracks. We index 10 versions of GrafanaOSS from microsoft/winget-pkgs.

Recent versions

  • 13.2.2latest
  • 13.2.1
  • 13.2.0
  • 13.1.3
  • 13.1.2
  • 13.1.1
  • 13.1.0
  • 13.0.2
  • 13.0.1.01
  • 13.0.1