CVE-2026-21728

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-04-24 Modified: 2026-10-26 First seen: 2026-10-29 Status: pending_score

Description

Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy. Mitigation can be done by setting max_result_limit in the search config, e.g. to 262144 (2^18). Alternatively, automatically restart the service.

Weakness Classification (2)

Affected Software (1)

VendorProductVersion
grafana tempo 1.3.0 – 2.8.4

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.64%
Raw Score 0.006370
Percentile 50.4%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00637
2026-10-28
0.00637

Intelligence Sources

nvd ref →