CVE-2025-66335 Apache Doris MCP Server: MCP SQL inject
Attackers can execute unintended SQL statements and bypass access restrictions via the MCP query interface in Apache Doris MCP Server.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-66335?
CVE-2025-66335 is a medium-severity SQL injection vulnerability in Apache Doris MCP Server, published on 20 Apr 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Apache Doris MCP Server versions earlier than 0.6.1 are affected by an improper neutralization flaw in query context handling that may allow execution of unintended SQL statements and bypass of intended query validation and access restrictions through the MCP query execution interface. Version 0.6.1 and later are not affected.
Weakness: CWE-89
Which versions are affected by CVE-2025-66335?
3 open source packages ship an affected version, including doris-mcp-server. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
doris-mcp-server PyPI | From 0.1.0 | 0.6.1 |
doris-mcp-server PyPI | From 0.1.0 | 0.6.1 |
doris-mcp-server PyPI | From 0.1.0 | 0.6.1 |
Products include Apache Doris Mcp Server.
How do I fix CVE-2025-66335?
Upgrade doris-mcp-server to 0.6.1 or later.
Use parameterised queries everywhere and never build SQL by joining strings. Upgrade affected software first; a web application firewall only buys time. More about SQL injection.
Is CVE-2025-66335 being exploited?
There is no known exploitation of CVE-2025-66335 in the wild and no public exploit code.
Other vulnerabilities in Apache Doris MCP Server
Sources
Also known as GHSA-qhfq-gvvc-5q6q, PYSEC-2026-2459.