CVEvulnerability

CVE-2025-66335

5.3 MEDIUM Published 2026-04-20 Modified 2026-10-07 Official page ↗
Status
Analyzed
Published
2026-04-20
Last modified
2026-10-07
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-89

Description

Apache Doris MCP Server versions earlier than 0.6.1 are affected by an improper neutralization flaw in query context handling that may allow execution of unintended SQL statements and bypass of intended query validation and access restrictions through the MCP query execution interface. Version 0.6.1 and later are not affected.

Affected configurations

• apache doris mcp server (>= 0.1.0 < 0.6.1)

Related

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References