CVE-2026-33375
Grafana MSSQL Data Source Plugin: Restriction Bypass Leading to OOM DoS
Summary
Grafana MSSQL Data Source Plugin: Restriction Bypass Leading to OOM DoS
Original description
The description as published by the source.
The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user (Viewer) to bypass API restrictions and trigger a catastrophic Out-Of-Memory (OOM) memory exhaustion, crashing the host container.
Affected packages
Bitnami
grafana
[{"type":"SEMVER","events":[{"introduced":"11.6.0"},{"fixed":"11.6.14"},{"introduced":"12.1.0"},{"fixed":"12.1.10"},{"introduced":"12.2.0"},{"fixed":"12.2.8"},{"introduced":"12.3.0"},{"fixed":"12.3.6"},{"introduced":"12.4.0"},{"fixed":"12.4.2"}]}]
References
- advisory grafana.com
- advisory nvd.nist.gov
- advisory github.com