Mcp Database Server
Approved changes feed: RSS · Atom
cpe:2.3:a:executeautomation:mcp-database-server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Executeautomation (f26a5523-5212-5d36-9c0a-6f519bf409ae) |
|---|---|
| Product | Mcp Database Server (db0ea6b1-221b-587c-bf5f-ead5f62d30d4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-59333 |
vulnerable | 2026-06-08 07:35:21.676894 |
@executeautomation/database-server does not properly restrict access, bypassing a "read-only" mode
HIGH (8.1)
The mcp-database-server (MCP Server) 1.1.0 and earlier, as distributed via the npm package @executeautomation/database-server, fails to implement adequate security controls to properly enforce a "read-only" mode. This vulnerability affects only the npm distribution; other distributions are not impacted. As a result, the server is susceptible to abuse and attacks on affected database systems such as PostgreSQL, and potentially others that expose elevated functionalities. These attacks may lead to denial of service and other unexpected behaviors.
Published: 2025-09-16T14:18:48.881Z
Updated: 2025-09-16T18:19:09.072Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.