{"uuid": "b9616421-f6ca-4a0f-b229-23975e20046f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9970", "content": "\ud83d\udea8 Unauthenticated attackers could turn Grafana MCP servers into proxies for internal networks and cloud metadata endpoints.\n\nPillar Security research team found affected releases accepted self-generated session IDs in place of authentication, exposing the server's Grafana service account to anyone who could reach it.\n\nA chained SSRF (CVE-2026-19516, CVSS 9.1) then let callers pick the destination, method, headers, and body of outbound requests. The server has passed 1.9 million Docker Hub downloads; Grafana shipped fixes in mcp-grafana v1.1.0.\n\nFull details here: https://thn.news/grafana-mcp-flaws", "creation_timestamp": "2026-09-04T13:00:04.761587Z"}