Advisories · Technology

Apache Software Foundation Apache SkyWalking MCP.

Every CVE that names Apache Software Foundation Apache SkyWalking MCP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-34884 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Apache SkyWalking MCP: SSRF via set_skywalking_url Tool and GraphQL Expression Injection in MCP Server
- Apache Software Foundation Apache SkyWalking MCP
- Server-side request forgery (SSRF)
Not analysed yet 18 Aug 2026