CVE-2026-33374 | Grafana up to 13.2.3 Prometheus Rule Conversion API allocation of resources

October 13, 2026 Yanac

A vulnerability labeled as problematic has been found in Grafana up to 12.3.11/12.4.12/13.0.10/13.1.7/13.2.3. This affects an unknown function of the component Prometheus Rule Conversion API. Such manipulation leads to allocation of resources.

This vulnerability is traded as CVE-2026-33374. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More