Apache SkyWalking MCP vulnerabilities

2 known vulnerabilities in Apache SkyWalking MCP from Apache. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Apache SkyWalking MCP: Server-Side Request Forgery

  CVE-2026-34884Aug 18, 2026Apache

  SSRF via set_skywalking_url Tool and GraphQL expression injection vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue.

• 7.1 High severity

  Apache SkyWalking MCP: Server-Side Request Forgery

  CVE-2026-34476Apr 13, 2026Apache

  Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue.