CVE-2025-66336

Apache Doris MCP Server contains a SQL injection vulnerability in a metadata query path. A user-controlled database name is directly interpolated into a SQL query, and the query is executed without passing the caller's authorization context. This may allow an authenticated attacker, or an anonymous attacker if authentication is disabled, to bypass SQL security validation and access metadata outside the intended database scope. Affected users are recommended to upgrade to Doris version 0.6.1 or later, which fixes the issue.

CVSS v3 8.1 HIGH

8.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://lists.apache.org/thread/4l4v3m7ofwrgp4s4s98pjb5l03fcrzo2	Mailing List Vendor Advisory
http://www.openwall.com/lists/oss-security/2026/06/22/1	Mailing List Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:apache:doris_mcp_server:*:*:*:*:*:*:*:*

History

30 Sep 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Apache Doris MCP Server contiene una vulnerabilidad de inyección SQL en una ruta de consulta de metadatos. Un nombre de base de datos controlado por el usuario se interpola directamente en una consulta SQL, y la consulta se ejecuta sin pasar el contexto de autorización del llamante. Esto puede permitir a un atacante autenticado, o a un atacante anónimo si la autenticación está deshabilitada, eludir la validación de seguridad SQL y acceder a metadatos fuera del alcance de la base de datos previsto. Se recomienda a los usuarios afectados actualizar a la versión 0.6.1 de Doris o posterior, que corrige el problema.

Information

Published : 2026-06-22 08:16

Updated : 2026-10-06 22:10

NVD link : CVE-2025-66336

Mitre link : CVE-2025-66336

CVE.ORG link : CVE-2025-66336

JSON object : View

Products Affected

apache

doris_mcp_server

CWE

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

{"id": "CVE-2025-66336", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-66336", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-06-22T15:49:32.488671Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security@apache.org", "affectedData": [{"vendor": "Apache Software Foundation", "product": "Apache Doris MCP Server", "versions": [{"status": "affected", "version": "0.1.0", "lessThan": "0.6.1", "versionType": "semver"}], "packageName": "doris-mcp-server", "collectionURL": "https://pypi.python.org", "defaultStatus": "unaffected"}]}], "published": "2026-06-22T08:16:36.390", "references": [{"url": "https://lists.apache.org/thread/4l4v3m7ofwrgp4s4s98pjb5l03fcrzo2", "tags": ["Mailing List", "Vendor Advisory"], "source": "security@apache.org"}, {"url": "http://www.openwall.com/lists/oss-security/2026/06/22/1", "tags": ["Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@apache.org", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "Apache Doris MCP Server contains a SQL injection vulnerability in a metadata query path. A user-controlled database name is directly interpolated into a SQL query, and the query is executed without passing the caller's authorization context. This may allow an authenticated attacker, or an anonymous attacker if authentication is disabled, to bypass SQL security validation and access metadata outside the intended database scope.\n\nAffected users are recommended to upgrade to Doris version 0.6.1 or later, which fixes the issue."}, {"lang": "es", "value": "Apache Doris MCP Server contiene una vulnerabilidad de inyecci\u00f3n SQL en una ruta de consulta de metadatos. Un nombre de base de datos controlado por el usuario se interpola directamente en una consulta SQL, y la consulta se ejecuta sin pasar el contexto de autorizaci\u00f3n del llamante. Esto puede permitir a un atacante autenticado, o a un atacante an\u00f3nimo si la autenticaci\u00f3n est\u00e1 deshabilitada, eludir la validaci\u00f3n de seguridad SQL y acceder a metadatos fuera del alcance de la base de datos previsto.\n\nSe recomienda a los usuarios afectados actualizar a la versi\u00f3n 0.6.1 de Doris o posterior, que corrige el problema."}], "lastModified": "2026-10-06T22:10:00.247", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apache:doris_mcp_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "95766A2C-71CC-4CC7-9F95-501B6ACC1E2F", "versionEndExcluding": "0.6.1", "versionStartIncluding": "0.1.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@apache.org"}