Executive brief
Apache Doris-MCP-Server: Improper Access Control results in bypassing a "read-only" mode
Affected products
- PyPI doris-mcp-server
Junglewise Threat Intelligence
CVE-2025-58337: PYSEC-2026-1315 - Apache Doris-MCP-Server: Improper Access Control results in bypassing a "read-only" mode
CVE-2025-58337 · Severity: medium · CVSS 4 · Published 2026-07-07
Technologies: doris-mcp-server (PyPI). Vendors: PyPI.