CVE-2022-46156

CVE-2022-46156 is a low-severity vulnerability affecting Grafana's Synthetic Monitoring Agent prior to version 0.12.0. It exposes the authentication token used to communicate with the Synthetic Monitoring API via a debugging endpoint, allowing an attacker with local access to potentially retrieve monitoring checks. The CVSS score is 3.3 (LOW), indicating a local attack vector with low complexity and limited impact (confidentiality only). There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.