Read the docs
TI-2026-67622 Aliases CVE-2026-89039GHSA-ffg3-vfrj-4mjj

Arbitrary file read via convert_playwright_script prompt in Grafana mcp-k6

Priority LOW 29CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-22 and the CVSS impact.

Summary

Grafana mcp-k6 from 0.3.0 before 0.7.0 contains a path traversal flaw (CWE-22). A caller who can invoke the convert_playwright_script prompt can pass a bare file path as the playwright_script argument and read any file readable by the user running the server, including SSH keys and cloud credentials in that user's home directory. The working-directory restriction on '@'-prefixed paths can also be bypassed with a symbolic link inside the working directory that points outside it (CWE-424). An attacker needs only low privileges and network access to the server.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Description from the CNA

A caller who can invoke the convert_playwright_script prompt in mcp-k6 can pass a bare file path as the playwright_script argument and receive the contents of any file readable by the user running the server, including SSH keys and cloud credentials in that user's home directory (path traversal). The working-directory restriction applied to '@'-prefixed paths can also be bypassed with a symbolic link inside the working directory that points outside it.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00379 32nd percentileScored 2026-11-07
Fix Fixed mcp-k6 (Grafana): 0.7.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Grafanamcp-k60.3.0 to before 0.7.00.7.0Patch availableCNA
  • mcp-k6 VendorGrafana Affected 0.3.0 to before 0.7.0 Fixed in 0.7.0 Patch available CNA

Remediation

Update Grafana mcp-k6 to version 0.7.0. The sources list no vendor advisory identifier for this fix.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

  • Fix · CNA mcp-k6 (Grafana) Fixed in 0.7.0

Timeline

  1. 2026-10-05 Threatist record created from CVE-2026-89039
  2. 2026-10-05 Alias added: GHSA-ffg3-vfrj-4mjj
  3. 2026-10-06 Title updated · CNA
  4. 2026-10-06 Fix available: Grafana/[email protected] · CNA

References

Advisory 1

  • TI-2021-16611 Snapshot authentication bypass in grafana KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-19604 Grafana path traversal KEVCVSS 3.1HIGH 7.5
  • TI-2024-08600 Grafana SQL Expressions allow for remote code execution CVSS 4.0CRITICAL 9.4
  • TI-2023-02931 Authentication bypass by spoofing in Grafana CVSS 3.1CRITICAL 9.8
  • TI-2020-10491 The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control… CVSS 3.1HIGH 8.2
  • TI-2025-03662 Open redirect in Grafana CVSS 3.1HIGH 7.6
See all 174 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences