Vulnerability · Published Jul 15, 2026 · Assigned by GRAFANA

CVE-2026-15583SSRF (confused deputy) in Grafana MCP Server via X-Grafana-URL header

High 8.6

In plain English

A high-severity security flaw in Grafana MCP Server from Grafana. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)8.6High

Exploit odds (30 days)0.5%top 55.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack tooling1Public PoC

Official description

A confused-deputy flaw in Grafana MCP Server allows an unauthenticated remote attacker to exfiltrate the server's environment-configured Grafana service-account token by supplying a crafted X-Grafana-URL request header. This also enables SSRF against arbitrary internal services, including cloud metadata endpoints.

Affected products (as reported)

Vendor	Product	Versions
Grafana	Grafana MCP Server	0.0.0 – through 0.17.1

Weakness: CWE-610 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References

https://grafana.com/security/security-advisories/cve-2026-15583 vendor-advisory