Read the docs

executeautomation

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

executeautomation records in CISA KEV

No executeautomation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mcp Database Server 1 record HIGH

Records

1 record

TI-2025-36895 CVE-2025-59333 · GHSA-65hm-pwj5-73pw

@executeautomation/database-server does not properly restrict access, bypassing a "read-only" mode

Priority HIGH 70

The mcp-database-server (MCP Server) 1.1.0 and earlier, as distributed via the npm package @executeautomation/database-server, fails to implement adequate security controls to properly enforce a "read-only" mode.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00398 Published 2025-09-16 No fix listed CWE-284
Open these records in search →