Description

An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values, causing unbounded memory growth that can eventually exhaust memory and crash the Grafana instance (denial of service).

Remediation

References

CVE-2026-8609

Related Vulnerabilities

PHP Other Vulnerability (CVE-2007-1378)

WordPress Plugin WooCommerce-GloBee Payment Gateway Security Bypass (1.1.1)

Moodle Credentials Management Errors Vulnerability (CVE-2011-4587)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-30596)

MySQL CVE-2016-0656 Vulnerability (CVE-2016-0656)

Severity

High

Classification

CVE-2026-8609 CWE-400 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities