Grafana Grafana Mcp Server
2 CVEs affecting Grafana Grafana Mcp Server. Latest disclosed: 2026-08-11. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-19516 | Critical | 9.1 | 2026-08-11 | A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the grafana_api_request tool lets the caller al… |
CVE-2026-15583 | High | 8.6 | 2026-07-15 | A confused-deputy flaw in Grafana MCP Server allows an unauthenticated remote attacker to exfiltrate the server's environment-configured Grafana service-accoun… |