CVE-2026-95502

CVSS 5.3 (medium) · published 2026-10-13

A Git server that Grafana's Git Sync (provisioning) is configured to use can exhaust Grafana's memory by returning oversized or highly compressed responses (uncontrolled resource consumption). Exploitation requires an administrator to have configured Git Sync with that server.

Weakness: CWE-409, CWE-770

Source: NVD CVE-2026-95502

References

• https://grafana.com/security/security-advisories/cve-2026-95502

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.