CVE-2025-66336: Apache Doris MCP Server: SQL injection leading the authentication bypass

Severity: high (CVSS 8.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-06-22 · updated 2026-10-06
Weakness: CWE-89

Description

Apache Doris MCP Server contains a SQL injection vulnerability in a metadata query path. A user-controlled database name is directly interpolated into a SQL query, and the query is executed without passing the caller's authorization context. This may allow an authenticated attacker, or an anonymous attacker if authentication is disabled, to bypass SQL security validation and access metadata outside the intended database scope. Affected users are recommended to upgrade to Doris version 0.6.1 or later, which fixes the issue.

Affected products

Apache Software Foundation Apache Doris MCP Server: from 0.1.0 before 0.6.1 — fixed in 0.6.1

How to fix

Upgrade to a fixed version: Apache Software Foundation Apache Doris MCP Server 0.6.1. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2025-66336 or the next vulnerability affects your stack