Medium severity6.5NVD Advisory· Published Mar 26, 2026· Updated Mar 31, 2026
CVE-2026-33375
CVE-2026-33375
Description
The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user (Viewer) to bypass API restrictions and trigger a catastrophic Out-Of-Memory (OOM) memory exhaustion, crashing the host container.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7- osv-coords5 versionspkg:apk/chainguard/grafana-fips-12.1pkg:apk/chainguard/grafana-fips-12.2pkg:bitnami/grafanapkg:rpm/opensuse/grafana&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/grafana&distro=openSUSE%20Tumbleweed
< 12.1.10.01-r0+ 4 more
- (no CPE)range: < 12.1.10.01-r0
- (no CPE)range: < 12.2.8.01-r0
- (no CPE)range: >= 11.6.0, < 11.6.14
- (no CPE)range: < 11.6.14+security04-bp160.1.1
- (no CPE)range: < 11.6.14+security01-1.1
Patches
Vulnerability mechanics
References
1- grafana.com/security/security-advisories/cve-2026-33375nvdVendor Advisory
News mentions
0No linked articles in our index yet.