CVE-2026-21729: Grafana Loki

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Loki queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy.

Affected products

• Grafana Loki: from v3.0.0, before v3.7.0 (fixed in v3.7.0)

Published 2026-07-16. Last modified 2026-07-16.