CVE-2026-34476

The Apache SkyWalking MCP component (specifically versions 0.1.0 and the github.com/apache/skywalking-mcp/internal/tools and github.com/apache/skywalking-mcp/internal/swmcp packages) is vulnerable to a Server-Side Request Forgery (SSRF) . The root cause is the improper validation of the SW-URL he...

CVE-2026-34884

Apache SkyWalking MCP version 0.1.0 is vulnerable to Server-Side Request Forgery (SSRF) and GraphQL expression injection . The SSRF vulnerability specifically occurs through the set skywalking url tool within the MCP Server. To remediate these issues, users are recommended to upgrade to version 0...