PT-2026-32336 · Apache · Apache Skywalking Mcp

CVE-2026-34476

Published

2026-04-13

Updated

2026-07-30

CVSS v3.1

7.1

High

Vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Apache SkyWalking MCP version 0.1.0

Description Server-Side Request Forgery occurs via the 'SW-URL' header.

Recommendations Upgrade to version 0.2.0.

Exploit

Fix

SSRF

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2026-34476

GHSA-C4HG-6933-X62X

GO-2026-5310

OPENSUSE-SU-2026:21483-1

Apache Skywalking Mcp