A confused-deputy flaw in Grafana MCP Server allows an unauthenticated remote attacker to exfiltrate the servers environment-configured Grafana service-account token by supplying a crafted X-Grafana-URL request header. This also enables SSRF against arbitrary internal services, including cloud metadata endpoints.
Weakness
The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.