← Database

CVE-2026-107509

MEDIUM CVSS: 6.5 Published: 2026-11-11 Modified: 2026-11-11

Description

A user with the Viewer role can make Grafana allocate an unbounded amount of memory, and crash it, with a single SQL Expression query that casts a value to a very large BINARY length (memory allocation with excessive size value).

Affected Platforms

Unknown

Weakness Type

CWE-400, CWE-789, CWE-1284

References