---
id: CVE-2025-66335
aliases:
  - GHSA-qhfq-gvvc-5q6q
  - PYSEC-2026-2459
title: >-
  Apache Doris MCP Server vulnerable to SQL Injection via improper query context
  neutralization
summary: >-
  Apache Doris MCP Server vulnerable to SQL Injection via improper query context
  neutralization
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
vendor: doris-mcp-server
product: doris-mcp-server
ecosystem: pip
affected:
  - 'doris-mcp-server >= 0.1.0, < 0.6.1'
patched:
  - doris-mcp-server 0.6.1
published: '2026-04-20'
updated: '2026-07-13'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-qhfq-gvvc-5q6q'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2025-66335'
  - url: 'https://github.com/apache/doris-mcp-server'
  - url: 'https://github.com/apache/doris-mcp-server/releases/tag/0.6.1'
  - url: 'https://lists.apache.org/thread/odp0fyyst8kxm7hhm9z4d1snh1y4hjpy'
  - url: 'http://www.openwall.com/lists/oss-security/2026/04/17/4'
tags:
  - osv
  - pip
epss: 0.00655
epssPercentile: 0.49996
ingestedAt: '2026-07-13T18:58:02.012Z'
---

## Overview

Apache Doris MCP Server versions prior to 0.6.1 are affected by an improper neutralization flaw in query context handling that may allow execution of unintended SQL statements and bypass of intended query validation and access restrictions through the MCP query execution interface. Versions 0.6.1 and later are not affected.

## Affected packages

- `doris-mcp-server >= 0.1.0, < 0.6.1`

## Remediation

Upgrade to a patched release:

- `doris-mcp-server 0.6.1`