ANCHORE-2026-28379

ANCHORE-2026-28379 PUBLISHED

A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error. This results in complete service unavailability requiring restart of the Grafana server.

Affected Products

Vendor	Product	Versions
Grafana	Grafana OSS	8.2.0, 12.0.0, 12.3.0

Timeline

May 13, 2026 CVE Published
May 13, 2026 CVE Updated

References

https://grafana.com/security/security-advisories/cve-2026-28379 url

Open in Interactive Console →