Description
Apache Doris MCP Server versions earlier than 0.6.1 are affected by an improper neutralization flaw in query context handling that may allow execution of unintended SQL statements and bypass of intended query validation and access restrictions through the MCP query execution interface. Version 0.6.1 and later are not affected.
INFO
Published Date :
2026-04-20T13:27:27.764Z
Last Modified :
2026-04-20T14:17:11.395Z
Source :
apache
AFFECTED PRODUCTS
The following products are affected by CVE-2025-66335 vulnerability.
| Vendors | Products |
|---|---|
| Apache |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2025-66335.
