An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate privilege.Referenceshttps://grafana.com/security/security-advisories/cve-2026-33377