Not rated

CVE-2026-34476 Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP

Description

Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue.

Affected products and versions

Product	Affected versions	Fixed in
Apache SkyWalking MCP	0.1.0	No fix stated

References

lists.apache.org lists.apache.org

Timeline

Published April 13, 2026
Last modified April 13, 2026

The 2 CVEs of Apache SkyWalking MCP →

CVE-2026-34884 SSRF via set_skywalking_url Tool and GraphQL expression injection vulnerability in Apache SkyWalking MCP Not rated

Track this CVE

CVE-2026-34476 Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP

Description

Affected products and versions

References

Timeline

Other CVEs of Apache SkyWalking MCP