The vulnerability allows an attacker to exploit a Server Side Request Forgery via the set_skywalking_url tool and inject arbitrary expressions into GraphQL queries that are processed by the SkyWalking MCP server. The SSRF capability can enable requests to arbitrary internal or external resources, while the GraphQL injection allows manipulation of query expressions that could lead to unauthorized data exposure or further compromise.

Apache SkyWalking MCP is affected in the 0.1.0 release. Users are recommended to upgrade to version 0.2.0 which resolves the issue.

The CVE entry does not list an EPSS score or KEV status, so the current exploitation probability is unknown. SELer provided no CVSS score, but the combination of SSRF and expression injection typically indicates a high severity potential. Attackers would likely interact with the web interface or REST endpoints that expose the set_skywalking_url tool and GraphQL API; such exploitation could be achieved without authentication if those endpoints are publicly accessible. The exact attack vector is inferred from the description and not explicitly detailed in the advisory.