CVE-2026-27880

Name of the Vulnerable Software and Affected Versions Grafana versions (affected versions not specified)

Description The OpenFeature feature toggle evaluation endpoint has a flaw where it reads input data without limits, potentially leading to out-of-memory crashes. The issue involves reading unbounded values into memory. The vulnerable component is the evaluation API. The API endpoint involved is the feature toggle evaluation endpoint. The input data is read into memory without any bounds checking.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.