Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Doris-MCP-Server

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2025-66336

    Apache Doris MCP Server: SQL injection leading the authentication bypass

    Apache Doris MCP Server contains a SQL injection vulnerability in a metadata query path. A user-controlled database name is directly interpolated into a SQL query, and the query is executed without passing the caller's authorization context. This may allow an…

    Apache Software Foundation Apache Doris-MCP-Server doris-mcp-server PyPI