CVE-2026-107509

A vulnerability exists in Grafana where a user with the Viewer role can trigger a denial of service. By submitting a single SQL Expression query that casts a value to a very large BINARY length , an attacker can force the application to allocate an unbounded amount of memory, leading to a crash. ...