CVE-2026-8609

Medium

Open

TLP:CLEAR

Pre-authentication denial of service via the OAuth login route

NVD CVE.org

DDoS

AI Analysis

No AI analysis yet.

Description

An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values, causing unbounded memory growth that can eventually exhaust memory and crash the Grafana instance (denial of service).

Details

CVSS Score: 5.3
EPSS Score ⓘ: 0.40%

32.7th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Confidence: 90%
Published: Jul 10, 2026
Last Modified: Aug 12, 2026

Notes

0

Log in to add a note

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

0

Log in to add an opinion

No opinions yet. Be the first to assess this intelligence.