CVE-2025-66335

Apache Doris MCP Server versions earlier than 0.6.1 are vulnerable to SQL Injection due to an improper neutralization flaw in query context handling. This flaw allows for the execution of unintended SQL statements and the bypass of intended query validation and access restrictions via the MCP que...

CVE-2025-66336

The doris-mcp-server (Apache Doris MCP Server) is vulnerable to a SQL injection in a metadata query path. The root cause is the direct interpolation of a user-controlled database name into a SQL query, which is executed without the caller's authorization context. This allows an authenticated atta...

CVE-2025-58337

The Apache Doris-MCP-Server (an Enterprise-grade Model Context Protocol server for Apache Doris) is vulnerable to Improper Access Control (CWE-284). An attacker possessing a valid read-only account can bypass the server's read-only mode due to the improper enforcement of access controls for SQL q...