ZeroDay Findings
Sign inSign up

Findings

CVE-2026-33378

Using the $__timeGroup macro, one can achieve an OOM by overloading the server.

Published May 13, 2026 · updated Jun 17, 2026 · grafana grafana

Using the $__timeGroup macro, one can achieve an OOM by overloading the server. This requires a SQL datasource. If the server is set up to auto-restart, the impact is minimal or non-existent, as the attack can take upwards of half an hour to crash the server.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 13, 2026 · NIST NVD

    Detected

    Using the $__timeGroup macro, one can achieve an OOM by overloading the server. This requires a SQL datasource. If the server is set up to auto-restart, the impact is minimal or non-existent, as the attack can take upwards of half an hour to crash the server.

  2. Jun 17, 2026 · NIST NVD

    Updated

    Using the $__timeGroup macro, one can achieve an OOM by overloading the server. This requires a SQL datasource. If the server is set up to auto-restart, the impact is minimal or non-existent, as the attack can take upwards of half an hour to crash the server.

Affected

  • cpe grafana/grafanaversion unspecified
  • cpe grafana/grafana11.6.14
  • cpe grafana/grafana12.2.8

Sources

  • CVE.orgVulnerability recordCVE-2026-33378

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-33378

    Using the $__timeGroup macro, one can achieve an OOM by overloading the server. This requires a SQL datasource. If the server is set up to auto-restart, the impact is minimal or non-existent, as the attack can take upwards of half an hour to crash the server.

    nvd.nist.gov

References