CVE-2025-66335

MediumCVSS 5.3

Published: 20/04/2026(UTC)Updated: 07/10/2026(UTC)Translated: 01/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.47%

39th percentile - higher than 39% of all known CVEs

Summary

Apache Doris MCP Server before version 0.6.1 has an improper neutralization flaw in query context handling that may allow execution of unintended SQL statements and bypass of query validation and access restrictions through the MCP interface.

Risk Assessment

An attacker could execute unauthorized SQL queries, potentially leading to data integrity issues or unauthorized data access.

Recommendation

Upgrade Apache Doris MCP Server to version 0.6.1 or later.

Other vulnerabilities in Apache Doris MCP Server

CVE-2025-66336High
Apache Doris MCP Server contains a SQL injection vulnerability in a metadata query path. A user-controlled database name is directly interpolated into a SQL query, and the query is executed without passing the caller's authorization context. This may allow an authenticated attacker, or an anonymous attacker if authentication is disabled, to bypass SQL security validation and access metadata outside the intended database scope.

Original NVD description (English source)

Apache Doris MCP Server versions earlier than 0.6.1 are affected by an improper neutralization flaw in query context handling that may allow execution of unintended SQL statements and bypass of intended query validation and access restrictions through the MCP query execution interface. Version 0.6.1 and later are not affected.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS