CVE-2026-34884

CRÍTICO 9.8CVE-2026-34884 · Published 18/08/2026 · updated 22/10/2026

En resumen

CVE-2026-34884 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a skywalking mcp (apache).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.69%, mayor que el 52.8% de las vulnerabilidades.
Solución: actualizar a 0.2.0 o posterior.

Package	Affected versions	Patched versions
skywalking mcp apache	`≥ 0.1.0, < 0.2.0`	`0.2.0`

Description

SSRF via set_skywalking_url Tool and GraphQL expression injection vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue.

References

lists.apache.org/thread/s447p6h5dfr02lx17v27phoksgb8mkkp · Mailing List
openwall.com/lists/oss-security/2026/04/13/5 · Mailing List

Más vulnerabilidades de skywalking mcp

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free