A user with authentication privileges can issue a TraceQL query that includes an excessively large exemplars hint value. The query causes the Grafana Tempo service to allocate a proportional amount of memory, eventually exceeding limits and triggering an out‑of‑memory crash. This results in a denial of service, interrupting normal operation of the Tempo tracing component. The weakness is a case of uncontrolled resource consumption due to improper validation of query parameters.

The vulnerability affects the Grafana Enterprise Traces product and its Tempo subsystem. No specific version releases are listed in the advisory, so any Grafana Tempo instance that implements TraceQL query handling is potentially impacted.

The CVSS score of 6.5 indicates moderate severity. No EPSS score is provided, and the issue is not listed in the CISA KEV catalog. Exploitation requires authenticated access to the Tempo service and the ability to submit a TraceQL query with a large exemplar hint. The attack path is therefore an authenticated internal or remote request, which could lead to a local denial of service for the Tempo service.