The vulnerability allows an attacker to exploit a Server Side Request Forgery via the set_skywalking_url tool and inject arbitrary expressions into GraphQL queries that are processed by the SkyWalking MCP server. The SSRF capability can enable requests to arbitrary internal or external resources, while the GraphQL injection allows manipulation of query expressions that could lead to unauthorized data exposure or further compromise.

Apache SkyWalking MCP is affected in the 0.1.0 release. Users are recommended to upgrade to version 0.2.0 which resolves the issue.

The EPSS score is <1% and the vulnerability is not listed in CISA KEV. The CVSS score of 9.8 indicates a critical risk level, reflecting the severe impact of SSRF and GraphQL expression injection. Attackers would likely interact with the web interface or REST endpoints that expose the set_skywalking_url tool and GraphQL API; such exploitation could be achieved without authentication if those endpoints are publicly accessible. The exact attack vector is inferred from the description and not explicitly detailed in the advisory.