CVE-2026-27880
OpenFeature evaluation API reads input data with no bounds
CVE-2026-27880 is a high vulnerability (CVSS 7.5) in Grafana, published March 27, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.80%, the 57th percentile. Fixed in grafana 12.2.8-r0.
- Severity
- 7.5 HighCVSS 3.1, CVE List
- Exploit chance
- 0.80%EPSS, 57th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
12.2.8-r0grafana +3 more
Description
The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
grafanaAlpine:v3.23 | 12.1.10 up to 12.2.8-r0 | 12.2.8-r0 |
grafanaAlpine:v3.24 | 12.1.10 up to 12.4.3-r0 | 12.4.3-r0 |
grafanaBitnami | 12.1.0 up to 12.1.10, 12.2.0 up to 12.2.8, 12.3.0 up to 12.3.6, 12.4.0 up to 12.4.2 | 12.1.1012.2.812.3.612.4.2 |
grafanaUbuntu:16.04:LTS | All versions, plus listed versions 2.6.0+dfsg-1 | None known |
What each source reports
CVE List Score used
OpenFeature evaluation API reads input data with no bounds
The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes.
- Record
CVE-2026-27880- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-125, CWE-770
- Updated
- 2026-11-02
EUVDEUVD-2026-16598
The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes.
- Record
EUVD-2026-16598- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-jmfj-8gxc-cg8c
The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can...
The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes.
- Record
GHSA-jmfj-8gxc-cg8c- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-125, CWE-770, CWE-787
- Updated
- 2026-11-02
NVD
The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes.
- Record
CVE-2026-27880- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-787, CWE-125, CWE-770
- Updated
- 2026-11-02
OSVALPINE-CVE-2026-27880
The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes.
- Record
ALPINE-CVE-2026-27880- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
OSV
OpenFeature evaluation API reads input data with no bounds
The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes.
- Record
CVE-2026-27880- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-27880
The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes.
- Record
UBUNTU-CVE-2026-27880- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVBIT-grafana-2026-27880No score
OpenFeature evaluation API reads input data with no bounds
The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes.
- Record
BIT-grafana-2026-27880- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, aliases, references | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.