Three MCP Database-Server Flaws Hit Apache Doris, Alibaba RDS, Apache Pinot: One Left Unpatched
Three MCP Database-Server Flaws Hit Apache Doris, Alibaba RDS, Apache Pinot: One Left Unpatched is a high-severity prompt injection issue in Apache Doris MCP server, a MCP server. Affected: Apache Doris MCP server (patched), Apache Pinot MCP server (patched), Alibaba RDS MCP server (UNPATCHED).
Is Apache Doris MCP server running on your developers' machines? Anomity finds every device with this MCP server installed, shows the version, and can block it by policy. Detect this across your developers' devices with Anomity →
Key facts
- ID
three-mcp-database-server-flaws-hit-apache-doris-alibaba-rds-apache- Severity
- high
- Attack type
- Prompt injection, Information disclosure
- Component
- Apache Doris MCP server · MCP server
- Known exploited
- No known exploitation
- Published
- Last verified
What is this vulnerability?
A bug hunter disclosed three MCP server flaws across major database integrations: Apache Doris's MCP server allowed unintended SQL execution via prompt injection; Alibaba RDS's MCP server leaked sensitive metadata and connection-string fragments; Apache Pinot's MCP server enabled potential instance takeover for internet-exposed deployments. Apache patched its two; Alibaba declined to patch and recommended customers disable the MCP bridge entirely. Affects any AI agent that connected through these MCP servers.
Affected versions
| Affected | Fixed in |
|---|---|
Apache Doris MCP server (patched), Apache Pinot MCP server (patched), Alibaba RDS MCP server (UNPATCHED) | No fixed version listed |
Am I affected by this vulnerability?
You are affected if you run Apache Doris MCP server (patched), Apache Pinot MCP server (patched), Alibaba RDS MCP server (UNPATCHED).
How do I fix it?
Update Apache Doris and Pinot MCP servers to latest. Disable the Alibaba RDS MCP server until vendor ships a fix. Audit database query logs for prompt-injection-style SQL since April. Restrict MCP database servers to least-privilege DB roles.
How do I find every machine running Apache Doris MCP server?
Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run Apache Doris MCP server and which version, then enforce a policy on it.