Editors could delete any annotation, even those they do not have read access to. The editor user cannot create or read the annotations.Referenceshttps://grafana.com/security/security-advisories/cve-2026-28374