CVE-2026-27880
High · 7.5CVSS
7.5
EPSS
0.6%
Published
Mar 27, 2026
CISA due date
—
The record
The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Chainguard | grafana-12.0 | 0 | 12.0.10-r0 |
| Chainguard | grafana-12.2 | 0 | 12.2.8.01-r2 |
| Chainguard | grafana-12.3 | 0 | 12.3.6-r1 |
| Chainguard | grafana-fips-11.6 | 0 | 11.6.14-r2 |
| Chainguard | grafana-fips-12.0 | 0 | 12.0.10-r2 |
| Wolfi | grafana-12.0 | 0 | 12.0.10-r0 |
| Wolfi | grafana-12.2 | 0 | 12.2.8.01-r2 |
| Wolfi | grafana-12.3 | 0 | 12.3.6-r1 |
Related vulnerabilities
- CVE-2025-41115 Grafana Incorrect Privilege Assignment vulnerability Also affects grafana-12.0
- CVE-2026-28375 A testdata data-source can be used to trigger out-of-memory crashes in Grafana. Also affects grafana-12.2
- CVE-2026-27879 A resample query can be used to trigger out-of-memory crashes in Grafana. Also affects grafana-12.2
- CVE-2026-27877 When using public dashboards and direct data-sources, all direct data-sources' passwords… Also affects grafana-12.2
- CVE-2026-27876 A chained attack via SQL Expressions and a Grafana Enterprise plugin can lead to a remote… Also affects grafana-12.2
- CVE-2026-33729 OpenFGA is a high-performance and flexible authorization/permission engine built for… Also affects grafana-12.2
- CVE-2026-32285 The Delete function fails to properly validate offsets when processing malformed JSON… Also affects grafana-12.2
- CVE-2026-24851 OpenFGA is a high-performance and flexible authorization/permission engine built for… Also affects grafana-12.2