CVE-2025-58337

The Apache Doris MCP Server is vulnerable to an improper access control flaw that allows an attacker with a valid read-only account to bypass the software's read-only mode. This vulnerability enables unauthorized modifications that should be restricted by the read-only policy. Affected versions i...