CVE-2025-1088

Very long unicode dashboard title or panel name can hang the frontend

State: Published
Severity: 2.7 Low
Published: Jun 18, 2025
Updated: Nov 23, 2025
Reserved: Feb 6, 2025

Description

In Grafana, an excessively long dashboard title or panel name will cause Chromium browsers to become unresponsive due to Improper Input Validation vulnerability in Grafana. This issue affects Grafana: before 11.6.2 and is fixed in 11.6.2 and higher.

Scores

CVSS	Score	Vector	Source
3.1	2.7 Low	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L	GRAFANA

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
GrafanaGrafana	before 11.6.2Affected

References

https://grafana.com/security/security-advisories/cve-2025-1088/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.