{"answers":{"affected":"3 open source packages ship an affected version, including doris-mcp-server. It affects 1 product.","exploited":"There is no known exploitation of CVE-2025-58337 in the wild and no public exploit code.","fix":"Upgrade doris-mcp-server to 0.6.0 or later.","what":"CVE-2025-58337 is a medium-severity missing authorization vulnerability in Apache Doris-MCP-Server, published on 5 Nov 2025. Any signed-in user can exploit it over the network, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2025-58337 and fix it if it is affected.\n\nWhat it is: CVE-2025-58337 is a medium-severity missing authorization vulnerability in Apache Doris-MCP-Server, published on 5 Nov 2025. Any signed-in user can exploit it over the network, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2025-58337 in the wild and no public exploit code.\n\nAffected packages and fixed versions:\n- doris-mcp-server (PyPI): affected all versions; fixed in 0.6.0\n- doris-mcp-server (PyPI): affected all versions; fixed in 0.6.0\n- doris-mcp-server (PyPI): affected all versions; fixed in 0.6.0\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2025-58337/ (Markdown: https://insights.sbomify.com/CVE-2025-58337/index.md)","id":"CVE-2025-58337","markdown":"https://insights.sbomify.com/CVE-2025-58337/index.md","name":"CVE-2025-58337","record":{"aliases":["GHSA-m35w-xx8c-6xc7","PYSEC-2026-1315"],"analysis":{"component_type":"server_software","fix_type":"upgrade","impacts":["data_modify","security_bypass"],"network_reachable":"yes","non_default_config":false,"product_category":"Apache Doris MCP Server","requires_auth":"low_privilege","summary":"Attackers with read-only access can bypass restrictions to perform unauthorized data modifications in Apache Doris MCP Server.","user_interaction":"not_required","vuln_class":"missing_authorization"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"apache","cpe":[{"product":"doris_mcp_server","vendor":"apache"}],"cvss":{"score":5.4,"severity":"medium","source":"cisa-adp","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","version":"3.1"},"cwes":[{"id":"CWE-284","name":"Improper Access Control"}],"description":"An attacker with a valid read-only account can bypass Doris MCP Server’s read-only mode due to improper access control, allowing modifications that should have been prevented by read-only restrictions.\n\nImpact:\n\nBypasses read-only mode; attackers with read-only access may perform unauthorized modifications.\n\nRecommended action for operators: Upgrade to version 0.6.0 as soon as possible (this release contains the fix).","ecosystems":["PyPI"],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":true,"headline":"Apache Doris-MCP-Server: Improper Access Control results in bypassing a \"read-only\" mode","id":"CVE-2025-58337","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":"PyPI","product":null,"products":[],"type":"missing_authorization","year":"2025"},"n_packages":3,"n_references":1,"next":{"headline":"An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480","id":"CVE-2025-58340"},"packages":[{"ecosystem":"PyPI","fixed":["0.6.0"],"introduced":["0"],"last_affected":[],"package":"doris-mcp-server","purl":null,"source":"GHSA-m35w-xx8c-6xc7"},{"ecosystem":"PyPI","fixed":["0.6.0"],"introduced":["0"],"last_affected":[],"package":"doris-mcp-server","purl":"pkg:pypi/doris-mcp-server","source":"GHSA-m35w-xx8c-6xc7"},{"ecosystem":"PyPI","fixed":["0.6.0"],"introduced":["0"],"last_affected":[],"package":"doris-mcp-server","purl":"pkg:pypi/doris-mcp-server","source":"PYSEC-2026-1315"}],"prev":{"headline":"Information disclosure in Junie","id":"CVE-2025-58335"},"products":["Apache Doris-MCP-Server"],"published":"2025-11-05","related":[{"cvss_score":8.1,"headline":"Apache Doris MCP Server: SQL injection leading the authentication bypass","id":"CVE-2025-66336","kev_date_added":null,"published":"2026-06-22"},{"cvss_score":5.3,"headline":"Apache Doris MCP Server: MCP SQL inject","id":"CVE-2025-66335","kev_date_added":null,"published":"2026-04-20"}],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CC BY 4.0","name":"GitHub Advisory Database","prefix":"GHSA"},{"class":"attribution","licence":"CC BY 4.0","name":"PyPA Advisory Database","prefix":"PYSEC"},{"class":"attribution","licence":"US public information, NVD API terms","name":"NVD"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"no","exploitation":"none","technical_impact":"partial"},"state":"PUBLISHED","updated":"2025-11-06","vendors":["Apache Software Foundation"]},"summary":"Attackers with read-only access can bypass restrictions to perform unauthorized data modifications in Apache Doris MCP Server.","url":"https://insights.sbomify.com/CVE-2025-58337/"}