← Database

CVE-2026-28376

MEDIUM CVSS: 6.5 Published: 2026-05-13 Modified: 2026-06-17

Description

The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. An authenticated user with access to the Grafana Live API can trigger this issue.

Affected Platforms

Grafana Grafana

Weakness Type

CWE-770

References