PT-2025-25859 · Grafana+2 · Grafana+2

Jinay Patel + 1 · Published 2025-06-17 · Updated 2025-08-04 · CVE-2025-1088

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Grafana versions prior to 11.6.2

Description The issue is caused by an excessively long dashboard title or panel name, leading to Improper Input Validation vulnerability in Grafana, which affects Chromium browsers and causes them to become unresponsive.

Recommendations For versions prior to 11.6.2, update to version 11.6.2 or higher to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2025-07441

BIT-GRAFANA-2025-1088

CVE-2025-1088

ECHO-EE2A-D273-FA3A

GHSA-CRVV-6W6H-CV34

GO-2025-3766

OPENSUSE-SU-2025:15226-1

OPENSUSE-SU-2025:15405-1

Affected Products

Chromium

Grafana

Red Os

References · 74

• https://bdu.fstec.ru/vul/2025-07441 · Security Note
• https://osv.dev/vulnerability/GHSA-crvv-6w6h-cv34 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-1088 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-1088 · Security Note
• https://osv.dev/vulnerability/BIT-grafana-2025-1088 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-1088 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15226-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15405-1 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-3766 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-1088 · Vendor Advisory
• https://github.com/grafana/grafana · Note
• https://suse.com/security/cve/CVE-2025-6023 · Note
• https://suse.com/security/cve/CVE-2025-52903 · Note
• https://suse.com/security/cve/CVE-2025-4656 · Note