Our takeCanadian Cyber Centre issued an advisory on a vulnerability in Grafana MCP Server and mcp-grafana <=1.0.0. Update if you self-host (some enterprises); most smaller teams use hosted Grafana and can ignore this one.Cyber Resilience desk
Sources (1)
- cccs · cccs
What this means for you — Security leader:Update Grafana MCP Server and mcp-grafana to a version newer than 1.0.0.
What this means for you — Lean IT orgs:If you run Grafana MCP Server or mcp-grafana, update it to a version newer than 1.0.0 as soon as the patch is available.
What this means for you — MSP:Check every client running Grafana MCP Server or mcp-grafana (≤1.0.0) and update to a fixed version when released.
What this means for you — Researcher:Update Grafana MCP Server and mcp-grafana to a version newer than 1.0.0.