CVE-2025-66336

CVE-2025-66336 – Apache Doris MCP Server has a SQL injection in a metadata query path where a user-controlled database name is directly interpolated into a SQL query, allowing bypass of SQL security validation and access to metadata outside the intended scope. This could enable an attacker, if au...