Apache Software Foundation Apache SkyWalking MCP

• CVE-2026-34884 Critical 9.8 Apache SkyWalking MCP: SSRF via set_skywalking_url Tool and GraphQL Expression Injection in MCP Server 0.7%
• CVE-2026-34476 High 7.1 Apache SkyWalking MCP: Server-Side Request Forgery via SW-URL Header in MCP Server 0.5%