Grafana Live Race Condition Vulnerability Leading to Denial-of-Service

A race condition vulnerability has been identified in Grafana Live, allowing authenticated users with Viewer role to cause a server crash. This is achieved by sending concurrent requests that lead to a fatal map access error, resulting in complete service disruption and requiring a restart of the Grafana server.

Impact

Exploitation of this vulnerability causes a server crash, leading to complete service unavailability and requiring a manual restart of the Grafana server.