Critical severity9.8NVD Advisory· Published Aug 18, 2026· Updated Sep 2, 2026
CVE-2026-34884
CVE-2026-34884
Description
SSRF via set_skywalking_url Tool and GraphQL expression injection vulnerability in Apache SkyWalking MCP.
This issue affects Apache SkyWalking MCP: 0.1.0.
Users are recommended to upgrade to version 0.2.0, which fixes this issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <0.2.0
Patches
Vulnerability mechanics
References
2- www.openwall.com/lists/oss-security/2026/04/13/5nvdMailing ListThird Party Advisory
- lists.apache.org/thread/s447p6h5dfr02lx17v27phoksgb8mkkpnvdMailing ListVendor Advisory
News mentions
0No linked articles in our index yet.