Vulnerabilities of grafana Tempo
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-27878 | A TraceQL query in Grafana Tempo with a large exemplars hint value can cause the Tempo instance to allocate an excessive… | 6.5 Medium | Jun 19, 2026 |
| CVE-2026-21728 | Tempo queries with large limits can cause large memory allocations which can impact the availability of the service,… | 7.5 High | Apr 24, 2026 |
| CVE-2026-28377 | A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint,… | 7.5 High | Mar 26, 2026 |