This critical vulnerability in Apache SkyWalking MCP enables attackers to perform unauthorized server-side requests and manipulate GraphQL queries.

The flaw arises from an SSRF vulnerability in the set_skywalking_url tool combined with a GraphQL expression injection issue. These vulnerabilities allow an unauthenticated attacker to force the server to make unintended network requests and execute arbitrary GraphQL queries.

With a CVSS score of 9.8, the potential impact is total. Attackers can leverage the SSRF to probe internal networks or access sensitive metadata services, while the GraphQL injection can be used to bypass authorization, exfiltrate data, or disrupt the availability of the SkyWalking monitoring platform.

Immediate Action: Upgrade Apache SkyWalking MCP to version 0.2.0 or later.

Proactive Monitoring: Inspect network logs for unusual outbound traffic originating from the SkyWalking server and monitor GraphQL query logs for suspicious or malformed input.

Compensating Controls: Implement strict network egress filtering on the server hosting SkyWalking MCP to prevent unauthorized SSRF-based communication with internal or external resources.

Public Exploit Available: No confirmed public exploit is available in the available data.

Due to the severity of these combined flaws, immediate upgrade to version 0.2.0 is required. Administrators should ensure that the deployment environment follows the principle of least privilege regarding network access to minimize the impact of potential SSRF attempts.