CVE-2026-34884 - Apache SkyWalking MCP: SSRF via set_skywalking_url Tool and GraphQL Expression Injection in MCP Server
CVE ID : CVE-2026-34884
Published : Aug. 18, 2026, 8:16 a. m.
• 2 hours, 51 minutes ago
Description : SSRF via set_skywalking_url Tool and GraphQL expression injection vulnerability in Apache SkyWalking MCP.
This issue affects Apache SkyWalking MCP: 0. 1. 0.
Users are recommended to upgrade to version 0. 2. 0, which fixes this issue.
Severity: 0.0
• NA