Skip to content
OpenAdvisories
Critical · 9.1 Public exploit CVE-2026-19516 EUVD-2026-55938GHSA-fr94-7cqc-vjrq

CVE-2026-19516 CVE Record

Published Aug 11, 2026 · Updated Aug 27, 2026 · Assigned by GRAFANA

Vendor: Grafana Product: Grafana MCP Server Product: mcp-grafana Category: Web / CMS

Description

A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the grafana_api_request tool lets the caller also choose the HTTP method, path, and body. Because the destination is not restricted to the configured Grafana instance, a caller can direct requests at internal, loopback, and link-local network services (including metadata endpoints) and read the responses, resulting in server-side request forgery. The fix for CVE-2026-15583 prevented the configured service-account token from being sent to unintended destinations but did not restrict the destinations themselves.

Affected products

VendorProductAffectedFixed
Grafana Grafana MCP Server 0.0.0 – ≤ 1.0.0 —
Grafana mcp-grafana 0.0.0 – ≤ 1.0.0 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References