Skip to content
fr Sign in
6.5 Medium

CVE-2026-27878 A TraceQL query in Grafana Tempo with a large exemplars hint value can cause the Tempo instance to allocate an excessive…

Description

A TraceQL query in Grafana Tempo with a large exemplars hint value can cause the Tempo instance to allocate an excessive amount of memory, resulting in an out-of-memory crash. This could allow an authenticated user to trigger a denial of service against the Tempo service.

Affected products and versions

Product Affected versions Fixed in
Enterprise Traces (GET) 2.6 2.6.1 → < 2.8.8 2.8.8
Tempo 2.6 2.6.0 → < 2.10.2 2.10.2

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Enterprise Traces (GET)

The 2 CVEs of Enterprise Traces (GET) →
CVE-2026-21728 Tempo queries with large limits can cause large memory allocations which can impact the availability of the service,… 7.5 High
Track this CVE