CVE-2025-66335— Apache Doris MCP Server: MCP SQL inject
Quick assessment
Affected
Apache Software Foundation Apache Doris MCP Server
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Apache Doris MCP Server是Apache基金会的一个上下文协议后端服务。 Apache Doris MCP Server 0.6.1之前版本存在安全漏洞，该漏洞源于查询上下文处理不当，可能导致执行意外SQL语句并绕过预期查询验证和访问限制。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-66335
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Apache Doris MCP Server: MCP SQL inject
Source: CVE Program / CVE List V5
Vulnerability Description
Apache Doris MCP Server versions earlier than 0.6.1 are affected by an improper neutralization flaw in query context handling that may allow execution of unintended SQL statements and bypass of intended query validation and access restrictions through the MCP query execution interface. Version 0.6.1 and later are not affected.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: CVE Program / CVE List V5
Vulnerability Title
Apache Doris MCP Server 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Apache Doris MCP Server是Apache基金会的一个上下文协议后端服务。 Apache Doris MCP Server 0.6.1之前版本存在安全漏洞，该漏洞源于查询上下文处理不当，可能导致执行意外SQL语句并绕过预期查询验证和访问限制。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Apache Software Foundation | Apache Doris MCP Server | 0.1.0 ~ 0.6.1 | - |
|
II. Public POCs for CVE-2025-66335
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-66335
请登录查看更多情报信息。
Same Patch Batch · Apache Software Foundation · 2026-04-20 · 3 CVEs total
| CVE-2026-33558 | Apache Kafka, Apache Kafka Clients: Information Exposure Through Network Client Log Output | |
| CVE-2026-33557 | Apache Kafka: Missing JWT token validation in OAUTHBEARER authentication |
IV. Related Vulnerabilities
Same vendor: Apache Software Foundation
-
CVE-2026-107460
Apache Fesod (Incubating): UrlImageConverter SSRF protection -
CVE-2026-92120
Apache Allura: Oauth1 Replay Attack -
CVE-2026-92119
Apache Allura: REST API Mass Assignment -
CVE-2026-92116
Apache Allura: OAuth1 missing callback validation -
CVE-2026-85499
Apache SkyWalking BanyanDB: Canopy does not enforce readonly
Same weakness: CWE-89
-
CVE-2026-63165
Omnispace Agora Project < 26.10.0 SQL Injection via sortEven -
CVE-2026-63152
Omnispace Agora Project < 26.10.0 Second-Order SQL Injection -
CVE-2026-63154
Omnispace Agora Project < 26.10.0 SQL Identifier Injection v -
CVE-2026-110083
Adobe Experience Manager | Improper Neutralization of Specia -
CVE-2026-88075
Configuration Manager Elevation of Privilege Vulnerability
V. Comments for CVE-2025-66335
No comments yet