CVE-2025-66335: Apache Doris MCP Server: MCP SQL inject

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-04-20 · updated 2026-10-07
Weakness: CWE-89

Description

Apache Doris MCP Server versions earlier than 0.6.1 are affected by an improper neutralization flaw in query context handling that may allow execution of unintended SQL statements and bypass of intended query validation and access restrictions through the MCP query execution interface. Version 0.6.1 and later are not affected.

Affected products

Apache Software Foundation Apache Doris MCP Server: from 0.1.0 before 0.6.1 — fixed in 0.6.1

How to fix

Upgrade to a fixed version: Apache Software Foundation Apache Doris MCP Server 0.6.1. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2025-66335 or the next vulnerability affects your stack