CVE-2026-28376 — Grafana Live push endpoint allows unbounded memory allocation leading to OOM
The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory condition…
Published: 2026-05-13 · CVSS: 6.5 · CVSS 3.1
The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. An authenticated user with access to the Grafana Live API can trigger this issue.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7