Skip to content
OpenAdvisories

Product · executeautomation

mcp-database-server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2025-59333

    @executeautomation/database-server does not properly restrict access, bypassing a "read-only" mode

    The mcp-database-server (MCP Server) 1.1.0 and earlier, as distributed via the npm package @executeautomation/database-server, fails to implement adequate security controls to properly enforce a "read-only" mode. This vulnerability affects only the npm distri…

    executeautomation mcp-database-server @executeautomation/database-server npm