{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-27879", "assignerOrgId": "57da9224-a3e2-4646-9d0e-c4dc2e05e7da", "state": "PUBLISHED", "assignerShortName": "GRAFANA", "dateReserved": "2026-02-24T14:30:17.727Z", "datePublished": "2026-03-27T14:28:56.133Z", "dateUpdated": "2026-03-27T14:28:56.133Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "57da9224-a3e2-4646-9d0e-c4dc2e05e7da", "shortName": "GRAFANA", "dateUpdated": "2026-03-27T14:28:56.133Z"}, "datePublic": "2026-03-27T14:26:32.584Z", "title": "Query resampling can cause unbounded memory allocations", "descriptions": [{"lang": "en", "value": "A resample query can be used to trigger out-of-memory crashes in Grafana."}], "affected": [{"vendor": "Grafana", "product": "Grafana", "platforms": ["Cloud", "OnPrem"], "defaultStatus": "unaffected", "versions": [{"version": "v8.0.0", "status": "affected", "versionType": "semver", "lessThan": "v11.6.14"}, {"version": "v12.0.0", "status": "affected", "versionType": "semver", "lessThan": "v12.1.10"}, {"version": "v12.2.0", "status": "affected", "versionType": "semver", "lessThan": "v12.2.8"}, {"version": "v12.3.0", "status": "affected", "versionType": "semver", "lessThan": "v12.3.6"}, {"version": "v12.4.0", "status": "affected", "versionType": "semver", "lessThan": "v12.4.2"}]}], "references": [{"url": "https://grafana.com/security/security-advisories/cve-2026-27879", "tags": ["vendor-advisory"]}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}}], "source": {"discovery": "INTERNAL_FINDING"}, "x_generator": {"engine": "cvelib 1.8.0"}}}}

{}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "A resample query can be used to trigger out-of-memory crashes in Grafana."}], "id": "CVE-2026-27879", "lastModified": "2026-03-27T15:16:51.187", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "security@grafana.com", "type": "Secondary"}]}, "published": "2026-03-27T15:16:51.187", "references": [{"source": "security@grafana.com", "url": "https://grafana.com/security/security-advisories/cve-2026-27879"}], "sourceIdentifier": "security@grafana.com", "vulnStatus": "Received"}

{}

{"analysis": {"en": {"generated_at": "2026-03-27T16:22:40.624386+00:00", "value": {"mitigation_remediation": ["Apply the vendor patch or upgrade Grafana to the latest released version as detailed in the official advisory, which fixes the unbounded memory allocation logic.", "If an immediate upgrade is not possible, disable or restrict resample query functionality for users or enforce role\u2011based access controls to limit who can run large queries.", "Configure Grafana\u2019s memory limits or system resource limits to cap the maximum memory usage for query processing, reducing the impact of accidental or malicious over\u2011allocation.", "Monitor Grafana logs for out\u2011of\u2011memory events and set alerts for abnormal memory usage so that incidents can be detected and responded to quickly."], "summary": {"action": "Immediate Patch", "impact": "Denial of Service via Out-of-Memory"}, "threat_synthesis": {"affected_systems": "The vulnerability applies to Grafana deployments that have not applied the latest fix. The advisory does not list a specific version range, so all installations are potentially affected unless they are running a patched release. Administrators should verify the Grafana version against the vendor\u2019s update information and upgrade if necessary.", "description_and_impact": "A resample query in Grafana can trigger uncontrolled memory allocation, causing the application to exhaust available memory and crash. The result is a denial of service that renders the dashboard unavailable until the process restarts. This flaw stems from an unbounded resource allocation weakness and does not compromise data confidentiality or integrity. It affects the query execution path within Grafana and can impact any user interacting with the platform when such queries are executed.", "risk_and_exploitability": "The CVSS score of 6.5 indicates a medium severity risk. No EPSS data is available, and the vulnerability is not listed in the KEV catalog, suggesting no known active exploitation. The likely attack vector is a remote attacker who can submit queries to the Grafana instance, or an authenticated user who can craft large resample queries. Exploitation requires only the ability to send such a query; no privileged access or other vulnerabilities are needed. If the attack succeeds, the attacker can temporarily deny service to all users of the Grafana dashboard until the application restarts."}}}}, "created": "2026-03-27T20:28:30.164825+00:00", "updated": "2026-03-27T20:28:30.164854+00:00", "vendors": [], "weaknesses": ["CWE-400"]}