CVE-2026-28379 — Viewer-triggered race condition in Grafana Live leads to complete server crash
A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error. This r…
Published: 2026-05-13 · CVSS: 6.5 · CVSS 3.1
A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error. This results in complete service unavailability requiring restart of the Grafana server.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7