Vulnerabilities of Apache Software Foundation Apache SkyWalking MCP
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-34884 | SSRF via set_skywalking_url Tool and GraphQL expression injection vulnerability in Apache SkyWalking MCP | Not rated | Aug 18, 2026 |
| CVE-2026-34476 | Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP | Not rated | Apr 13, 2026 |