{"id":"CVE-2025-58337","aliases":["GHSA-m35w-xx8c-6xc7","PYSEC-2026-1315"],"title":"Apache Doris-MCP-Server: Improper Access Control results in bypassing a \"read-only\" mode","summary":"Apache Doris-MCP-Server: Improper Access Control results in bypassing a \"read-only\" mode","severity":"medium","vendor":"doris-mcp-server","product":"doris-mcp-server","ecosystem":"pip","affected":["doris-mcp-server < 0.6.0"],"patched":["doris-mcp-server 0.6.0"],"published":"2025-11-05","updated":"2026-07-07","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-m35w-xx8c-6xc7","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58337"},{"url":"https://github.com/apache/doris-mcp-server/commit/5923cc1c8973069a6d54eca1948a10488cbf409e"},{"url":"https://github.com/apache/doris-mcp-server"},{"url":"https://lists.apache.org/thread/6tswlphj0pqn9zf25594r3c1vzvfj40h"},{"url":"https://security.snyk.io/vuln/SNYK-PYTHON-DORISMCPSERVER-13835132"},{"url":"http://www.openwall.com/lists/oss-security/2025/11/04/5"}],"tags":["osv","pip"],"epss":0.00347,"epssPercentile":0.28222,"ingestedAt":"2026-07-08T18:25:50.926Z","slug":"CVE-2025-58337","body":"## Overview\n\nAn attacker with a valid read-only account can bypass Doris MCP Server’s read-only mode due to improper access control, allowing modifications that should have been prevented by read-only restrictions.\n\nImpact:\n\nBypasses read-only mode; attackers with read-only access may perform unauthorized modifications.\n\nRecommended action for operators: Upgrade to version 0.6.0 as soon as possible (this release contains the fix).\n\n## Affected packages\n\n- `doris-mcp-server < 0.6.0`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `doris-mcp-server 0.6.0`","depth":"sunlit","depthScore":28,"depthScoreParts":{"impact":27.5,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}