CVE-2025-1088

LOW

Very long unicode dashboard title or panel name can hang the frontend

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2025-1088 has a selected CVSS score of 2.7 (low).

Description

In Grafana, an excessively long dashboard title or panel name will cause Chromium browsers to become unresponsive due to Improper Input Validation vulnerability in Grafana. This issue affects Grafana: before 11.6.2 and is fixed in 11.6.2 and higher.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 18, 2025 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

Grafana

Browse Grafana / Grafana

Default status: unaffected

CVE ListBefore 11.6.2affected

github.com/grafana/grafana

Browse Go / github.com/grafana/grafana
GitHub Advisory0.0.1-test to < 11.6.2 · Fixed in 11.6.2affected
Before 0.0.0-20250521211231-e0ba4b480954 · Fixed in 0.0.0-20250521211231-e0ba4b480954affected

References

3