CVE Intelligence

Apache Software Foundation Skywalking Mcp vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Apache Software Foundation Skywalking Mcp: 2 record(s), with affected versions and fixes.
cpe:2.3:a:apache:skywalking_mcp

CVE-2026-34884 Critical · 9.8 CWE-918 Aug 18, 2026
Apache SkyWalking MCP: SSRF via set_skywalking_url Tool and GraphQL Expression Injection in MCP Server
SSRF via set_skywalking_url Tool and GraphQL expression injection vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue.
CVE-2026-34476 High · 7.1 CWE-918 Apr 13, 2026
Apache SkyWalking MCP: Server-Side Request Forgery via SW-URL Header in MCP Server
Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue.