CVE-2025-58337

The Apache Doris-MCP-Server (an Enterprise-grade Model Context Protocol server for Apache Doris) is vulnerable to Improper Access Control (CWE-284). An attacker possessing a valid read-only account can bypass the server's read-only mode due to the improper enforcement of access controls for SQL q...