Apache Software Foundation Apache Doris MCP Server

• CVE-2025-66336 High 8.1 Apache Doris MCP Server: SQL injection leading the authentication bypass 0.6%
• CVE-2025-66335 Medium 5.3 Apache Doris MCP Server: MCP SQL inject 0.7%
• CVE-2025-58337 Medium 5.4 Apache Doris-MCP-Server: Improper Access Control results in bypassing a "read-only" mode for doris-mcp-server MCP Server 0.4%