CVE-2026-21728
Full vulnerability record from the local CVENow database.
Description
Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy. Mitigation can be done by setting max_result_limit in the search config, e.g. to 262144 (2^18). Alternatively, automatically restart the service.
Severity
HIGH
CVSS score
7.5
(v3.1)
Vulnerability status
Modified
Source identifier
Published
2026-04-24 09:16:03.710000
Last modified
2026-10-26 21:10:00.170000
View original CVE JSON
{
"id": "CVE-2026-21728",
"sourceIdentifier": "[email protected]",
"published": "2026-04-24T09:16:03.710",
"lastModified": "2026-10-26T21:10:00.170",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy.\n\nMitigation can be done by setting max_result_limit in the search config, e.g. to 262144 (2^18). Alternatively, automatically restart the service."
},
{
"lang": "es",
"value": "Las consultas de Tempo con límites grandes pueden causar grandes asignaciones de memoria, lo que puede impactar la disponibilidad del servicio, dependiendo de su estrategia de despliegue.\n\nLa mitigación se puede realizar configurando max_result_limit en la configuración de búsqueda, por ejemplo, a 262144 (2^18)."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Grafana",
"product": "Tempo",
"defaultStatus": "unaffected",
"versions": [
{
"version": "1.3.0",
"lessThanOrEqual": "2.8.3",
"versionType": "semver",
"status": "affected"
},
{
"version": "2.9.0",
"lessThanOrEqual": "2.9.1",
"versionType": "semver",
"status": "affected"
},
{
"version": "2.10.0",
"lessThanOrEqual": "2.10.1",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Grafana",
"product": "Enterprise Traces (GET)",
"defaultStatus": "unaffected",
"versions": [
{
"version": "1.0.0",
"lessThanOrEqual": "2.8.7",
"versionType": "semver",
"status": "affected"
}
]
}
]
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"affectedData": [
{
"vendor": "Red Hat",
"product": "Multicluster Global Hub 1.3.4",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.3::el9"
],
"versions": [
{
"version": "1779212259",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Multicluster Global Hub 1.4.5",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.4::el9"
],
"versions": [
{
"version": "1779579439",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Multicluster Global Hub 1.6.5",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.6::el9"
],
"versions": [
{
"version": "1780167118",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Multicluster Global Hub 1.7.0",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.7::el9"
],
"versions": [
{
"version": "1779925273",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat multicluster global hub 1.5.3",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.5::el9"
],
"versions": [
{
"version": "1778867753",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Logging Subsystem for Red Hat OpenShift",
"defaultStatus": "unaffected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "openshift-logging/lokistack-gateway-rhel9",
"cpes": [
"cpe:/a:redhat:logging:6"
]
},
{
"vendor": "Red Hat",
"product": "Multicluster Global Hub",
"defaultStatus": "unaffected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel8",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"defaultStatus": "unaffected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "rhacm2/acm-grafana-rhel9",
"cpes": [
"cpe:/a:redhat:acm:2"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Ceph Storage 5",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "rhceph/rhceph-5-dashboard-rhel8",
"cpes": [
"cpe:/a:redhat:ceph_storage:5"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Ceph Storage 6",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "rhceph/rhceph-6-dashboard-rhel9",
"cpes": [
"cpe:/a:redhat:ceph_storage:6"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Ceph Storage 9",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "rhceph/grafana-rhel10",
"cpes": [
"cpe:/a:redhat:ceph_storage:9"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 10",
"defaultStatus": "unaffected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "grafana",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9",
"defaultStatus": "unaffected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "grafana",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "rhosdt/tempo-gateway-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3",
"defaultStatus": "unaffected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "rhosdt/tempo-query-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3",
"defaultStatus": "unaffected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "rhosdt/tempo-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3",
"defaultStatus": "unaffected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "rhosdt/tempo-rhel9-operator",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3"
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-04-24T11:29:58.649315Z",
"id": "CVE-2026-21728",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-400"
}
]
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-770"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:grafana:tempo:*:*:*:*:*:*:*:*",
"versionStartIncluding": "1.3.0",
"versionEndExcluding": "2.8.4",
"matchCriteriaId": "AE74525D-4401-4907-BB5F-E4FD2595CA5E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:grafana:tempo:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.9.0",
"versionEndExcluding": "2.9.2",
"matchCriteriaId": "4F731ED3-2882-414C-B5FE-679B76A751A4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:grafana:tempo:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.10.0",
"versionEndExcluding": "2.10.2",
"matchCriteriaId": "A90B7E68-DFF4-449F-A145-C1ABB0184B2E"
}
]
}
]
}
],
"references": [
{
"url": "https://grafana.com/security/security-advisories/cve-2026-21728",
"source": "[email protected]",
"tags": [
"Broken Link"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:21769",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:22347",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:22423",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:23345",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:24503",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2026-21728",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461395",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21728.json",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
}
]
}