Grafana Mcp Server
Monthly
Server-side request forgery in Grafana's mcp-grafana (Grafana MCP Server) lets an authenticated caller override the outbound request destination via the X-Grafana-URL header while using the grafana_api_request tool to control HTTP method, path, and body. Because the destination is never constrained to the configured Grafana instance, callers can pivot the server into internal, loopback, and link-local services-including cloud metadata endpoints-and read the responses. This is an incomplete-fix follow-on to CVE-2026-15583, which stopped the service-account token from leaking to unintended hosts but left the destinations themselves unrestricted; no public exploit identified at time of analysis.
Server-side request forgery and credential theft in Grafana MCP Server lets an unauthenticated remote attacker steal the server's environment-configured Grafana service-account token by sending a crafted X-Grafana-URL request header, and pivot to reach arbitrary internal services including cloud metadata endpoints. The token grants the attacker the MCP server's full Grafana privileges, and the SSRF primitive exposes internal infrastructure behind the network perimeter. No public exploit identified at time of analysis, but the CVSS 8.6 (scope-changed) rating and unauthenticated network vector make this a high-priority fix.
Server-side request forgery in Grafana's mcp-grafana (Grafana MCP Server) lets an authenticated caller override the outbound request destination via the X-Grafana-URL header while using the grafana_api_request tool to control HTTP method, path, and body. Because the destination is never constrained to the configured Grafana instance, callers can pivot the server into internal, loopback, and link-local services-including cloud metadata endpoints-and read the responses. This is an incomplete-fix follow-on to CVE-2026-15583, which stopped the service-account token from leaking to unintended hosts but left the destinations themselves unrestricted; no public exploit identified at time of analysis.
Server-side request forgery and credential theft in Grafana MCP Server lets an unauthenticated remote attacker steal the server's environment-configured Grafana service-account token by sending a crafted X-Grafana-URL request header, and pivot to reach arbitrary internal services including cloud metadata endpoints. The token grants the attacker the MCP server's full Grafana privileges, and the SSRF primitive exposes internal infrastructure behind the network perimeter. No public exploit identified at time of analysis, but the CVSS 8.6 (scope-changed) rating and unauthenticated network vector make this a high-priority fix.