Filtered by vendor Grafana
Subscriptions
Filtered by product Grafana Mcp Server
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-15583 | 1 Grafana | 1 Grafana Mcp Server | 2026-07-30 | 8.6 High |
| A confused-deputy flaw in Grafana MCP Server allows an unauthenticated remote attacker to exfiltrate the server's environment-configured Grafana service-account token by supplying a crafted X-Grafana-URL request header. This also enables SSRF against arbitrary internal services, including cloud metadata endpoints. | ||||
Page 1 of 1.