Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Using the $__timeGroup macro, one can achieve an OOM by overloading the server. This requires a SQL datasource. If the server is set up to auto-restart, the impact is minimal or non-existent, as the attack can take upwards of half an hour to crash the server.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
6 versions affected across 1 product
CVE-2026-33378 Using the $__timeGroup macro, one can achieve an OOM by overloading the server. This requires a SQL datasource. If the server is set up to auto-restart, the impact is… https://www.cve.org/CVERecord?id=CVE-2026-33378
Post summary
The post explains that using the $__timeGroup macro can trigger an OOM condition against a SQL data source, but it offers no proof‑of‑concept, patch information, or evidence of real‑world exploitation.
10 of 10 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | grafana | grafana | - | - | - |
| App | grafana | grafana | 11.6.14 | - | - |
| App | grafana | grafana | 11.6.14 | - | - |
| App | grafana | grafana | 12.2.8 | - | - |
| App | grafana | grafana | 12.2.8 | - | - |
| App | grafana | grafana | 12.3.6 | - | - |
| App | grafana | grafana | 12.3.6 | - | - |
| App | grafana | grafana | 12.4.3 | - | - |
| App | grafana | grafana | 13.0.0 | - | - |
| App | grafana | grafana | 13.0.1 | - | - |