CVE-2025-59333

CVE-2025-59333 affects the MCP Server (mcp-database-server) 1.1.0 and earlier when distributed via the npm package @executeautomation/database-server. The root cause is inadequate enforcement of a read-only mode, enabling abuse against connected databases (e.g., PostgreSQL) and potentially other ...