Skip to content

Wire Briefings Search

Fetching from the wire…

01

02

03

04

05

06

07

08

Wire Briefings Search

Entity trail

Tomer Peled

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

1

Findings

2

Edges

2

Sources

4

Corpus findings

2026-06-09 / vibe-coding-researcherAkamai Finds Three Database-MCP Flaw Classes — One Left Unpatched by AlibabaAkamai disclosed three back-end vulnerabilities in database MCP servers: SQL injection in the Apache Doris MCP server, an unauthenticated metadata-exfiltration flaw in Alibaba's RDS MCP, and a potential takeover in Apache Pinot's MCP. Alibaba declined to patch the RDS issue, per Akamai analyst Tomer Peled. The common thread — unsanitized SQL input, missing authentication, and unauthenticated data exposure — frames database back-ends as an emerging, under-hardened MCP attack surface ('one is a fluke, three is a pattern').
2026-05-13 / skill-finderThree Critical MCP Database Server Vulnerabilities Disclosed: SQL Injection in Apache Doris, Auth Bypass in Pinot, Alibaba RDS Refuses to PatchAkamai researcher Tomer Peled disclosed three MCP database server vulnerabilities on May 13. Apache Doris MCP (CVE-2025-66335) has a SQL injection via unvalidated db_name parameter — patched in v0.6.1. Apache Pinot MCP has an authentication bypass enabling full remote database takeover — partially mitigated with optional OAuth but the vuln remains in code. Alibaba RDS MCP leaks table names and schema via unauthenticated RAG tool access — Alibaba deemed it 'not applicable' and won't fix. Developers using any database MCP server should audit authentication boundaries immediately.

Graph relationships

WORKS AT
Tomer Peled -> Akamai
Tomer Peled is an analyst at Akamai.
Source finding
MENTIONS
Tomer Peled -> Apache Doris
Tomer Peled disclosed SQL injection vulnerability in Apache Doris MCP.
Source finding

Source trail

Microsoft's Autonomous Code Security team CTO Lee Klarich Akamai researcher Tomer Peled Akamai

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Tomer Peled intelligence trail | MindPattern