Apache SkyWalking MCP: SSRF and GraphQL Expression Injection Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-34884, Summary: Affected version: Apache SkyWalking MCP 0.1.0 SSRF via set_skywalking_url Tool and GraphQL expression injection vulnerability in Apache SkyWalking MCP. EPSS 0.00 CVSS 9.8 CVE-2026-34884 Apache FI NCSC-FI · 20. 8. 04:00