diff --git a/grafana.spec b/grafana.spec
index 38e6fe1..ab5d94c 100644
--- a/grafana.spec
+++ b/grafana.spec
@@ -1019,6 +1019,7 @@ done
 %changelog
 * Mon Dec 1 2025 Sam Feifer <sfeifer@redhat.com> 10.2.6-22
 - Resolves RHEL-125629: CVE-2025-58183
+- Resolves RHEL-132756: Grafana-selinux prevents plugins from searching cgroups
 
 * Wed Jun 18 2025 Sam Feifer <sfeifer@redhat.com> 10.2.6-20
 - Resolves RHEL-97520: Rework grafana-selinux spec file sections
diff --git a/grafana.te b/grafana.te
index 41f0cb3..a536e21 100644
--- a/grafana.te
+++ b/grafana.te
@@ -108,6 +108,16 @@ allow grafana_t self:unix_stream_socket connectto;
 
 allow grafana_t self:netlink_route_socket { create bind getattr nlmsg_read };
 
+optional_policy(`
+	require {
+		type cgroup_t;
+		class dir { search };
+		class file { open read };
+	}
+	allow grafana_t cgroup_t:dir search;
+	allow grafana_t cgroup_t:file { open read };
+')
+
 optional_policy(`
 	require {
 		type smtp_port_t;