Skip to content
Apache Software Foundation Doris vulnerabilities
-
apache software foundation doris
Apache Doris: JDBC driver URL validation bypass leads to remote code execution
CVE-2026-96443
6.5 Medium
-
apache software foundation doris
Apache Doris: Improper Authentication Allows Unauthorized Access to FE Meta Service
CVE-2026-31377
7.5 High
-
apache software foundation doris
Apache Doris: Authorization bypass leading to unauthorized data access
CVE-2026-68570
6.5 Medium
-
apache software foundation doris
Apache Doris: Authorization bypass allowing a low-privilege user to read/write/drop arbitrary tables
CVE-2026-72524
8.8 High
-
apache doris
Apache Doris: Improper Authentication in Frontend HTTP API
CVE-2026-58319
9.1 Critical
-
apache doris mcp server
Apache Doris MCP Server: SQL injection leading the authentication bypass
CVE-2025-66336
Fix available
8.1 High
-
apache doris mcp server
Apache Doris MCP Server: MCP SQL inject
CVE-2025-66335
Fix available
5.3 Medium
-
apache doris mcp server, apache software foundation doris-mcp-server +1 more
Apache Doris-MCP-Server: Improper Access Control results in bypassing a "read-only" mode for doris-mcp-server MCP Server
CVE-2025-58337
Fix available
5.4 Medium
-
apache doris
Apache Doris: allows admin users to read arbitrary files through the REST API
CVE-2024-48019
5.4 Medium
-
apache doris
Apache Doris: Downloading arbitrary remote jar files resulting in remote command execution
CVE-2024-27438
9.8 Critical
-
apache doris
Apache Doris: Possible race condition
CVE-2024-26307
5.3 Medium
-
apache doris
Apache Doris: Timing Attack weakness
CVE-2023-41313
9.8 Critical
-
apache doris
Apache Doris: Missing API authentication allowed DoS
CVE-2023-41314
8.2 High
-
apache doris, apache software foundation doris(incubating) +1 more
Apache Doris hardcoded cryptography initialization
CVE-2022-23942
Fix available
7.5 High