Vulnerabilities of grafana Grafana MCP Server
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-19516 | A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the… | 9.1 Critical | Aug 11, 2026 |
| CVE-2026-15583 | A confused-deputy flaw in Grafana MCP Server allows an unauthenticated remote attacker to exfiltrate the server's… | 8.6 High | Jul 15, 2026 |