Skip to content

Vulnerabilities of Apache Software Foundation Apache Doris MCP Server

Is your version affected?

CVE Summary Score Published
CVE-2025-66336 Apache Doris MCP Server contains a SQL injection vulnerability in a metadata query path Not rated Jun 22, 2026
CVE-2025-66335 Apache Doris MCP Server versions earlier than 0.6.1 are affected by an improper neutralization flaw in query context… Not rated Apr 20, 2026

Other Apache Software Foundation products