Grafana MCP session spoofing via unauthenticated mcp-session-<uuid> header

Arnold Chan@slaz

•updated Sep 6, 2026•0•0•0

Detects unauthenticated attempts to invoke Grafana API tools via the Model Context Protocol (MCP) by utilizing spoofed Mcp-Session-Id headers while bypassing bearer token authentication requirements. This primarily targets unauthorized access to API functionality on Grafana instances configured with bearer-token authentication (v1.1.0+).