medium6.5
CVE-2026-33375
The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user (Viewer) to bypass API restrictions and trigger a catastrophic Out…
Impact
The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user (Viewer) to bypass API restrictions and trigger a catastrophic Out-Of-Memory (OOM) memory exhaustion, crashing the host container.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Grafana | Grafana | from 11.6.0 before 11.6.14 from 12.1.0 before 12.1.10 from 12.2.0 before 12.2.8 from 12.3.0 before 12.3.6 from 12.4.0 before 12.4.2 |