A resample query in Grafana can trigger uncontrolled memory allocation, causing the application to exhaust available memory and crash. The result is a denial of service that renders the dashboard unavailable until the process restarts. This flaw stems from an unbounded resource allocation weakness and does not compromise data confidentiality or integrity. It affects the query execution path within Grafana and can impact any user interacting with the platform when such queries are executed.

The vulnerability applies to Grafana deployments that have not applied the latest fix. The advisory does not list a specific version range, so all installations are potentially affected unless they are running a patched release. Administrators should verify the Grafana version against the vendor’s update information and upgrade if necessary.

The CVSS score of 6.5 indicates a medium severity risk. No EPSS data is available, and the vulnerability is not listed in the KEV catalog, suggesting no known active exploitation. The likely attack vector is a remote attacker who can submit queries to the Grafana instance, or an authenticated user who can craft large resample queries. Exploitation requires only the ability to send such a query; no privileged access or other vulnerabilities are needed. If the attack succeeds, the attacker can temporarily deny service to all users of the Grafana dashboard until the application restarts.