CVE-2026-34884— Apache SkyWalking MCP: SSRF via set_skywalking_url Tool and GraphQL Expression Injection in MCP Server
Possible ATT&CK Techniques 2AI
T1199 · Trusted Relationship T1190 · Exploit Public-Facing ApplicationGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-34884
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Apache SkyWalking MCP: SSRF via set_skywalking_url Tool and GraphQL Expression Injection in MCP Server
Source: CVE Program / CVE List V5
Vulnerability Description
SSRF via set_skywalking_url Tool and GraphQL expression injection vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Apache Software Foundation | Apache SkyWalking MCP | 0.1.0 | - |
II. Public POCs for CVE-2026-34884
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-34884
请登录查看更多情报信息。
Mailing List Discussions for CVE-2026-34884 (1)
IV. Related Vulnerabilities
Same vendor: Apache Software Foundation
- CVE-2026-73632
Apache Struts: Shared serialization state in the JSON plugin - CVE-2026-73631
Apache Struts: Shared parsing state in the JSON plugin - CVE-2026-73635
Apache Struts: Unbounded growth of localized-text caches dri - CVE-2026-73634
Apache Struts: Unbounded read of a Content Security Policy v - CVE-2026-73633
Apache Struts: Unbounded read of a JSON request body
Same weakness: CWE-918
- CVE-2026-64849
MLflow: Unauthenticated full-read SSRF in webhook delivery: - CVE-2026-35219
Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, S - CVE-2026-73560
vLLM: SSRF + arbitrary local file read in MiMoV2OmniMultiMod - CVE-2026-48053
Kolibri has Unauthenticated Server-Side Request Forgery (SSR - CVE-2026-75053
IntelliJ IDEA 2026.2.1前SSRF漏洞
V. Comments for CVE-2026-34884
No comments yet