Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-27878

Tempo TraceQL query with exemplar hint could result in unbounded memory usage

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GRAFANA

Description

A TraceQL query in Grafana Tempo with a large exemplars hint value can cause the Tempo instance to allocate an excessive amount of memory, resulting in an out-of-memory crash. This could allow an authenticated user to trigger a denial of service against the Tempo service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Grafana Enterprise Traces (GET)

Default version status: unaffected

  • 2.6.1 to < 2.8.8affected

Grafana Tempo

Default version status: unaffected

  • 2.6.0 to < 2.10.2affected

References