CVE-2026-19516

creationtimestamp| type| source ---|---|--- 2026-08-11 06:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117075347103329501 2026-08-11 06:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msrwrzr6an25 2026-08-11 16:03:19+00:00| seen|...

CVE-2026-19516 CVE-2026-19516 CVE Record

A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the grafanaapirequest tool lets the caller also choose the HTTP method, path, and body. Because the destination is not restricted to the configured Grafana instance, a caller can direct...