What’s Vulnerable › Products

Apache Software Foundation Apache Doris MCP Server vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Apache Software Foundation Apache Doris MCP Server version is affected

Latest Apache Software Foundation Apache Doris MCP Server vulnerabilities

• CVE-2025-66336 — Apache Doris MCP Server: SQL injection leading the authentication bypass (CVSS 8.1)
• CVE-2025-66335 — Apache Doris MCP Server: MCP SQL inject (CVSS 5.3)
• CVE-2025-58337 — Apache Doris-MCP-Server: Improper Access Control results in bypassing a "read-only" mode for doris-mcp-server MCP Server (CVSS 5.4)