CVE-2026-34884
Severity CVSS v4.0:
Pending analysis
Type:
CWE-918
Server-Side Request Forgery (SSRF)
Publication date:
18/08/2026
Last modified:
18/08/2026
Description
SSRF via set_skywalking_url Tool and GraphQL expression injection vulnerability in Apache SkyWalking MCP.<br />
<br />
<br />
<br />
<br />
<br />
This issue affects Apache SkyWalking MCP: 0.1.0.<br />
<br />
Users are recommended to upgrade to version 0.2.0, which fixes this issue.