← CVE Intelligence

CVE-2026-33375

Grafana MSSQL Data Source Plugin: Restriction Bypass Leading to OOM DoS PUBLISHED

Description (CNA)

The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user (Viewer) to bypass API restrictions and trigger a catastrophic Out-Of-Memory (OOM) memory exhaustion, crashing the host container.

Affected (CNA)

Vendor / productVersions
Grafana / Grafana OSSaffected 11.6.0 before 11.6.14+security-01; affected 12.1.0 before 12.1.10+security-01; affected 12.2.0 before 12.2.8+security-01; affected 12.3.0 before 12.3.6+security-01; affected 12.4.0 before 12.4.2

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.