CERT24CVE-2026-8609 — Pre-authentication denial of service via the OAuth login routeLoading data…
CERT24Threat Observatory
Period

CVE-2026-8609 — Pre-authentication denial of service via the OAuth login route

A vulnerability in Grafana allows an unauthenticated attacker to repeatedly access the OAuth login route with unique values. This can cause unbounded memory growth, eventually exhaust system memory, and crash the Grafana instance, resulting in denial of service for legitimate users.

← Back to intelligence

CVE-2026-8609 — Pre-authentication denial of service via the OAuth login route

A vulnerability in Grafana allows an unauthenticated attacker to repeatedly access the OAuth login route with unique values. This can cause unbounded memory growth, eventually exhaust system memory, and crash the Grafana instance, resulting in denial of service for legitimate users.