This vulnerability in Grafana MCP Server (CVE-2026-19516) involves an SSRF flaw where the X-Grafana-URL header controls the destination of outbound requests made by the mcp-grafana component. Additionally, the grafana_api_request tool permits the caller to specify the HTTP method, path, and body of these requests. Because there is no restriction on the destination URL, attackers can target internal network services, including metadata endpoints, and retrieve their responses. The issue remains despite prior mitigation efforts (CVE-2026-15583) that stopped the service-account token from being sent to unintended destinations but did not limit the destinations themselves. The vulnerability has a CVSS 3.1 score of 9.1, indicating critical severity.

An attacker with at least low privileges can exploit this SSRF vulnerability to send arbitrary HTTP requests to internal or local network services via the Grafana MCP Server. This can lead to unauthorized disclosure of sensitive information from internal endpoints, including metadata services. The vulnerability impacts confidentiality, integrity, and availability as indicated by the CVSS vector (C:H/I:L/A:L).

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Until a fix is available, restrict access to the Grafana MCP Server and monitor for suspicious usage of the X-Grafana-URL header. Avoid exposing the service to untrusted networks or users with low privileges.