CVE-2026-88858

A user with the Viewer role in Grafana can crash the server by submitting a crafted server-side math expression, leading to a denial of service via uncontrolled recursion . If a user also possesses permissions to provision alert rules, they can ensure the outage persists across restarts. This vul...