Unbounded Memory Read in OpenFeature Causes Out-of-Memory Crash

Publication date: 2026-03-27

Last updated on: 2026-06-30

Assigner: Grafana Labs

Description

The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-03-27

Last Modified

2026-06-30

Generated

2026-07-06

AI Q&A

2026-03-27

EPSS Evaluated

2026-07-05

NVD

CVE-2026-27880

EUVD

EUVD-2026-16598

Affected Vendors & Products

Vendor	Product	Version / Range
grafana	grafana	From 12.1.10 (inc) to 12.2.0 (exc)
grafana	grafana	From 12.2.8 (inc) to 12.3.0 (exc)
grafana	grafana	From 12.3.6 (inc) to 12.4.0 (exc)
grafana	grafana	to 12.1.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-770	The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the OpenFeature feature toggle evaluation endpoint, which reads unbounded values into memory. Because it does not limit the size of the input, it can cause the system to consume excessive memory, potentially leading to out-of-memory crashes.

Impact Analysis

The primary impact of this vulnerability is that it can cause out-of-memory crashes in the affected system. This means that the system could become unstable or unavailable, leading to potential downtime or disruption of services.

Hi! I’m here to help you understand CVE-2026-27880. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70