Not rated

CVE-2026-34476 Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP

Description

Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue.

Affected products and versions

Product	Affected versions	Fixed in
Apache SkyWalking MCP	0.1.0	No fix stated

The 2 CVEs of Apache SkyWalking MCP →

CVE-2026-34884 SSRF via set_skywalking_url Tool and GraphQL expression injection vulnerability in Apache SkyWalking MCP Not rated

Do you use Apache SkyWalking MCP?

Track this CVE Watch Apache SkyWalking MCP Check my SBOMs

www.cveye.io/en/cve/CVE-2026-34476

Timeline

Published April 13, 2026
Last modified April 13, 2026

References

lists.apache.org lists.apache.org

Track this CVE

CVE-2026-34476 Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP

Description

Affected products and versions

Other CVEs of Apache SkyWalking MCP