{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-27879", "assignerOrgId": "57da9224-a3e2-4646-9d0e-c4dc2e05e7da", "state": "PUBLISHED", "assignerShortName": "GRAFANA", "dateReserved": "2026-02-24T14:30:17.727Z", "datePublished": "2026-03-27T14:28:56.133Z", "dateUpdated": "2026-03-27T14:28:56.133Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "57da9224-a3e2-4646-9d0e-c4dc2e05e7da", "shortName": "GRAFANA", "dateUpdated": "2026-03-27T14:28:56.133Z"}, "datePublic": "2026-03-27T14:26:32.584Z", "title": "Query resampling can cause unbounded memory allocations", "descriptions": [{"lang": "en", "value": "A resample query can be used to trigger out-of-memory crashes in Grafana."}], "affected": [{"vendor": "Grafana", "product": "Grafana", "platforms": ["Cloud", "OnPrem"], "defaultStatus": "unaffected", "versions": [{"version": "v8.0.0", "status": "affected", "versionType": "semver", "lessThan": "v11.6.14"}, {"version": "v12.0.0", "status": "affected", "versionType": "semver", "lessThan": "v12.1.10"}, {"version": "v12.2.0", "status": "affected", "versionType": "semver", "lessThan": "v12.2.8"}, {"version": "v12.3.0", "status": "affected", "versionType": "semver", "lessThan": "v12.3.6"}, {"version": "v12.4.0", "status": "affected", "versionType": "semver", "lessThan": "v12.4.2"}]}], "references": [{"url": "https://grafana.com/security/security-advisories/cve-2026-27879", "tags": ["vendor-advisory"]}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}}], "source": {"discovery": "INTERNAL_FINDING"}, "x_generator": {"engine": "cvelib 1.8.0"}}}}

{}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "A resample query can be used to trigger out-of-memory crashes in Grafana."}], "id": "CVE-2026-27879", "lastModified": "2026-03-30T13:26:29.793", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "security@grafana.com", "type": "Secondary"}]}, "published": "2026-03-27T15:16:51.187", "references": [{"source": "security@grafana.com", "url": "https://grafana.com/security/security-advisories/cve-2026-27879"}], "sourceIdentifier": "security@grafana.com", "vulnStatus": "Awaiting Analysis"}

{"bugzilla": {"description": "Grafana: Grafana: Denial of Service via resample query", "id": "2452286", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452286"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-770", "details": ["A flaw was found in Grafana. A remote attacker with low privileges can exploit this vulnerability by sending a specially crafted resample query. This can trigger out-of-memory crashes, leading to a Denial of Service (DoS) for the affected system."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}, "name": "CVE-2026-27879", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "grafana", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "grafana", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "grafana", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-03-27T14:28:56Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-27879\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-27879\nhttps://grafana.com/security/security-advisories/cve-2026-27879"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": ["cloud", "onprem"], "status": "affected", "versions": {"scheme": "semver", "value": "[8.0.0,11.6.14)"}}, {"platform": ["cloud", "onprem"], "status": "affected", "versions": {"scheme": "semver", "value": "[12.0.0,12.1.10)"}}, {"platform": ["cloud", "onprem"], "status": "affected", "versions": {"scheme": "semver", "value": "[12.2.0,12.2.8)"}}, {"platform": ["cloud", "onprem"], "status": "affected", "versions": {"scheme": "semver", "value": "[12.3.0,12.3.6)"}}, {"platform": ["cloud", "onprem"], "status": "affected", "versions": {"scheme": "semver", "value": "[12.4.0,12.4.2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Grafana", "source": "cna", "vendor": "Grafana"}, "product": "grafana", "vendor": "grafana"}], "analysis": {"en": {"generated_at": "2026-03-29T21:20:34.107346+00:00", "value": {"mitigation_remediation": ["Update Grafana to a patched version when it becomes available", "If a patch is not yet released, limit or disable the use of resample queries in dashboards", "Configure system or container memory limits to prevent application crashes", "Monitor Grafana logs for out\u2011of\u2011memory errors and restart the service automatically if crashes occur"], "summary": {"action": "Apply Patch", "impact": "Unbounded memory allocation can lead to out\u2011of\u2011memory crashes and denial of service in Grafana"}, "threat_synthesis": {"affected_systems": "This issue affects Grafana products as listed by the CNA. No specific version numbers are provided in the advisory, so all installations that run the vulnerable resample functionality are potentially exposed.", "description_and_impact": "A poorly validated resample query in Grafana can trigger unlimited memory allocations, exhausting system memory and crashing the platform. This flaw matches the common weakness of uncontrolled resource consumption and can cause service interruption for affected dashboards, impacting availability. The impact is limited to crashing instances rather than data leakage or code execution.", "risk_and_exploitability": "The CVSS score of 6.5 indicates a moderate severity; the EPSS score of less than 1% suggests low current exploitation likelihood, and the vulnerability is not present in the CISA KEV list. The attack vector is inferred to be through the web interface or API when an attacker supplies a crafted resample query, which may require user authentication or access to a dashboard that can issue such a query. No additional exploitation conditions are detailed in the advisory."}}}}, "created": "2026-03-27T20:28:30.164825+00:00", "updated": "2026-03-30T07:03:53.941938+00:00", "vendors": ["grafana", "grafana$PRODUCT$grafana"]}