CVE-2026-107509
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
Nov 11, 2026
Vendor
unknown
Description
A user with the Viewer role can make Grafana allocate an unbounded amount of memory, and crash it, with a single SQL Expression query that casts a value to a very large BINARY length (memory allocation with excessive size value).