Grafana MCP server (mcp-grafana) at a glance
Grafana Labs published CVE-2026-19516 on August 11, 2026: in mcp-grafana, the X-Grafana-URL header and the grafana_api_request tool let a caller send requests to internal, loopback, and metadata endpoints and read the replies. Grafana rates it critical (CVSS 9.1); upgrade to 1.1.0 or later.
Grafana MCP server (mcp-grafana): status
- Affected
- mcp-grafana versions before 1.1.0 (CVE-2026-19516; Grafana lists only the fixed version)
- mcp-grafana versions before 0.17.1 (CVE-2026-15583)
- Status as of
What changed with Grafana MCP server (mcp-grafana)
Grafana's advisory says a caller who can use the grafana_api_request tool could set the X-Grafana-URL header to choose where mcp-grafana sends outbound requests, along with the HTTP method, path, and body. Because the destination was not limited to the configured Grafana instance, requests could reach internal, loopback, and link-local services, including cloud metadata endpoints, and return their responses to the caller.
It follows CVE-2026-15583 (high, 8.6), published July 15, which let an unauthenticated attacker use the same header to obtain the server's Grafana service-account token; that was fixed in 0.17.1. The earlier fix stopped the token from going to other hosts but did not restrict destinations, which 1.1.0 addresses. Some reports cite a 9.9 score; Grafana's own rating is 9.1, critical.
How to fix it: Grafana MCP server (mcp-grafana)
1. Update
Upgrade mcp-grafana to 1.1.0 or later, which covers both CVE-2026-19516 and the earlier CVE-2026-15583.
grafana.com (opens in a new tab)
Advisories
Where to compare Grafana MCP server (mcp-grafana)
Independent leaderboards and official resources for comparing this model yourself. Rankings change often; each site shows its own current data.
Why Grafana MCP server (mcp-grafana) matters for businesses
Observability MCP servers often sit inside private networks next to databases and cloud metadata services, so an SSRF there can expose credentials and internal systems to anyone who can reach the agent. Update mcp-grafana to 1.1.0 or later and do not expose MCP servers to untrusted callers.
Sources for this story
- CVE-2026-19516: Grafana MCP server-side request forgery via X-Grafana-URL header (grafana_api_request) (opens in a new tab)Official
Grafana Labs · grafana.com
- CVE-2026-15583: Grafana MCP server-side request forgery via X-Grafana-URL header (opens in a new tab)Official
Grafana Labs · grafana.com
- CVE-2026-19516 (opens in a new tab)Official
NIST National Vulnerability Database · nvd.nist.gov
- GHSA-fr94-7cqc-vjrq (opens in a new tab)Official
GitHub Advisory Database · github.com
Last verified: . IA Compa summarizes public announcements for business readers. We are not affiliated with the companies mentioned. Always confirm details, pricing, and availability with the official source.
- #security
- #cve
- #grafana
- #mcp
- #ssrf
- #observability