Aller au contenu
en Se connecter
6.5 Moyenne

CVE-2026-27878 A TraceQL query in Grafana Tempo with a large exemplars hint value can cause the Tempo instance to allocate an excessive…

Description

A TraceQL query in Grafana Tempo with a large exemplars hint value can cause the Tempo instance to allocate an excessive amount of memory, resulting in an out-of-memory crash. This could allow an authenticated user to trigger a denial of service against the Tempo service.

Produits et versions touchés

Produit Versions touchées Corrigé en
Enterprise Traces (GET) 2.6 2.6.1 → < 2.8.8 2.8.8
Tempo 2.6 2.6.0 → < 2.10.2 2.10.2

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Enterprise Traces (GET)

Les 2 CVE de Enterprise Traces (GET) →
CVE-2026-21728 Tempo queries with large limits can cause large memory allocations which can impact the availability of the service,… 7.5 Élevée
Suivre cette CVE