CVE record published for the Apache SkyWalking MCP SSRF and GraphQL injection fixed in April

CVE-2026-34884 was published on 2026-08-18 against Apache SkyWalking MCP 0.1.0, recording a server-side request forgery through the set_skywalking_url tool together with a GraphQL expression injection. The Apache Software Foundation is the assigning authority, so the record is the project's own text.

The fix long predates the record. Version 0.2.0, which the record names as the remedy, was released on 2026-04-02, and Apache announced the issue to its mailing list on 2026-04-13. Nineteen weeks then passed before the CVE record appeared. The mailing-list announcement and the CVE record carry the same description and the same credit to Andrea Cosentino as reporter.

The two surfaces disagree about how serious it is, and the disagreement is worth stating rather than resolving. Apache's announcement rates the issue "important", which is the second tier of its own four-level scale, and neither the announcement nor the CNA record asserts a CVSS score. The NVD entry, still marked "Awaiting Analysis" when retrieved on 2026-08-20, carries a CVSS 3.1 base score of 9.8 critical. A reader who meets this issue through a vulnerability feed will most likely see the 9.8 and not the project's own rating.

The affected version is the server's first release. MCP News verified this server on 2026-08-18 and published a story on 2026-08-14 about its migration to the official Go SDK, work that landed on the default branch well after 0.2.0 and is not covered by any tagged release.