CVE-2026-33375: Vulnerability in Grafana Grafana OSS
The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user (Viewer) to bypass API restrictions and trigger a catastrophic Out-Of-Memory (OOM) memory exhaustion, crashing the host container.
AI Analysis
Technical Summary
The Grafana OSS MSSQL data source plugin contains a logic flaw that enables a user with low privileges (Viewer) to circumvent API restrictions. This flaw can be exploited to trigger catastrophic memory exhaustion (Out-Of-Memory), resulting in the crash of the host container running Grafana. The vulnerability affects versions 11.6.0, 12.1.0, 12.2.0, 12.3.0, and 12.4.0. The CVSS 3.1 base score is 6.5, reflecting a network attack vector with low attack complexity and low privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, but high availability impact.
Potential Impact
Successful exploitation leads to a denial-of-service condition by exhausting memory resources, causing the Grafana host container to crash. There is no direct impact on confidentiality or integrity, but availability of the Grafana service is severely affected.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict Viewer role assignments to trusted users and monitor for abnormal memory usage patterns. Avoid exposing the MSSQL data source plugin to untrusted users. Follow updates from Grafana for an official patch or workaround.
CVE-2026-33375: Vulnerability in Grafana Grafana OSS
Description
The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user (Viewer) to bypass API restrictions and trigger a catastrophic Out-Of-Memory (OOM) memory exhaustion, crashing the host container.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Grafana OSS MSSQL data source plugin contains a logic flaw that enables a user with low privileges (Viewer) to circumvent API restrictions. This flaw can be exploited to trigger catastrophic memory exhaustion (Out-Of-Memory), resulting in the crash of the host container running Grafana. The vulnerability affects versions 11.6.0, 12.1.0, 12.2.0, 12.3.0, and 12.4.0. The CVSS 3.1 base score is 6.5, reflecting a network attack vector with low attack complexity and low privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, but high availability impact.
Potential Impact
Successful exploitation leads to a denial-of-service condition by exhausting memory resources, causing the Grafana host container to crash. There is no direct impact on confidentiality or integrity, but availability of the Grafana service is severely affected.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict Viewer role assignments to trusted users and monitor for abnormal memory usage patterns. Avoid exposing the MSSQL data source plugin to untrusted users. Follow updates from Grafana for an official patch or workaround.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GRAFANA
- Date Reserved
- 2026-03-19T07:55:06.977Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 69c5ac523c064ed76fd41c4b
Added to database: 3/26/2026, 9:59:46 PM
Last enriched: 4/24/2026, 11:14:46 PM
Last updated: 5/10/2026, 10:35:34 AM
Views: 162
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.