TI-2025-36129 Aliases CVE-2025-58337 GHSA-m35w-xx8c-6xc7

Apache Doris-MCP-Server: Improper Access Control results in bypassing a "read-only" mode for doris-mcp-server MCP Server

LOW 25CWE-284Published 2025-11-05 · Updated 2025-11-06

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: Low · Low · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and GitHub. Impact type from CWE-284.

Summary

An attacker with a valid read-only account can bypass Doris MCP Server’s read-only mode due to improper access control, allowing modifications that should have been prevented by read-only restrictions. Impact: Bypasses read-only mode; attackers with read-only access may perform unauthorized modifications. Recommended action for operators: Upgrade to version 0.6.0 as soon as possible (this release contains the fix).

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00372 31st percentileScored 2026-11-07

Fix Fixed Apache Doris-MCP-Server (Apache Software Foundation): 0.6.0doris-mcp-server (PyPI): 0.6.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Apache	Apache Doris-MCP-Server	0.1.0 to before 0.6.0	0.6.0	Patch available	CNA
—	doris-mcp-server (PyPI)	before 0.6.0	0.6.0	Patch available	GHSA-m35w-xx8c-6xc7

Apache Doris-MCP-Server VendorApache Affected 0.1.0 to before 0.6.0 Fixed in 0.6.0 Patch available CNA
doris-mcp-server (PyPI) Vendor— Affected before 0.6.0 Fixed in 0.6.0 Patch available GHSA-m35w-xx8c-6xc7

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:apache:doris_mcp_server::::::::	before 0.6.0	Vulnerable	Apache

cpe:2.3:a:apache:doris_mcp_server:*:*:*:*:*:*:*:* Versions before 0.6.0 Vulnerable ·Apache

Remediation

Fix · CNA Apache Doris-MCP-Server (Apache Software Foundation) Fixed in 0.6.0
Fix · GHSA-m35w-xx8c-6xc7 doris-mcp-server (PyPI) Fixed in 0.6.0 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2025-58337
2026-10-03 Alias added: GHSA-m35w-xx8c-6xc7

References

Advisory 3

Other 2

TI-2025-40807 Apache Doris MCP Server: SQL injection leading the authentication bypass CVSS 3.1HIGH 8.1
TI-2025-40806 Apache Doris MCP Server: MCP SQL inject CVSS 3.1MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences