CVE-2025-1088

A flaw was found in grafana. Improper input validation of dashboard titles and panel names allows an excessively long string to trigger Chromium browser unresponsiveness. A remote attacker can trigger this condition by providing a crafted dashboard title or panel name. This results in a denial of service affecting the browser rendering Grafana. The vulnerability stems from a lack of bounds checking on user-supplied input.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this flaw limit dashboard titles and panel names to a reasonable length.