CVE-2025-66336
Apache Doris MCP Server: SQL injection leading the authentication bypass
CVSS Score
8.1
EPSS Score
0.0%
EPSS Percentile
0th
Apache Doris MCP Server contains a SQL injection vulnerability in a metadata query path. A user-controlled database name is directly interpolated into a SQL query, and the query is executed without passing the caller's authorization context. This may allow an authenticated attacker, or an anonymous attacker if authentication is disabled, to bypass SQL security validation and access metadata outside the intended database scope. Affected users are recommended to upgrade to Doris version 0.6.1 or later, which fixes the issue.
| CWE | CWE-89 |
| Vendor | apache software foundation |
| Product | apache doris mcp server |
| Published | Jun 22, 2026 |
| Last Updated | Jun 22, 2026 |
Stay Ahead of the Next One
Get instant alerts for apache software foundation apache doris mcp server
Be the first to know when new high vulnerabilities affecting apache software foundation apache doris mcp server are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Apache Software Foundation / Apache Doris MCP Server
0.1.0 < 0.6.1
References
Credits
🔍 cherno.x.