medium6.5
CVE-2026-28379
A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map ac…
Impact
A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error. This results in complete service unavailability requiring restart of the Grafana server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Grafana | Grafana | from 8.5.0 before 11.6.14 from 12.2.0 before 12.2.8 from 12.3.0 before 12.3.6 from 12.4.0 before 12.4.3 Versions 11.6.14, 12.2.8 |