CVE-2026-19516 | Grafana mcp-grafana up to 1.0.0 grafana_api_request tool X-Grafana-URL server-side request forgery

A vulnerability marked as problematic has been reported in Grafana mcp-grafana up to 1.0.0. Affected by this issue is some unknown functionality of the component grafana_api_request tool. Performing a manipulation of the argument X-Grafana-URL results in server-side request forgery.

This vulnerability was named CVE-2026-19516. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More