Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-05-25 · source-backed
A security researcher found vulnerabilities in MCP servers for Apache Doris (unintended SQL execution), Alibaba RDS (metadata exfiltration), and Apache Pinot (potential full takeover). Apache patched Doris. Alibaba declined to fix. Exposed MCP servers have nearly tripled to 1,467, with up to 200,000 vulnerable instances. Audit your MCP-connected database agents.
Each link below shares sources, entities, or timing with this story.
Akamai criticizes Apache Doris / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Akamai criticizes Apache Doris); both cover Alibaba, Apache Pinot, MCP, SQL; overlapping topics (alibaba, apache, database, flaw, server).
Adversa AI criticizes MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Adversa AI criticizes MCP); both cover MCP, SQL; overlapping topics (agent, alibaba, apache, dori, server).
Anthropic released MCP / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Anthropic released MCP); both cover Audit, MCP; overlapping topics (found, full, have, server).
CircleCI released MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (CircleCI released MCP); both cover Audit, MCP; overlapping topics (agent, execution, flaw, server).
Claude Code uses MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses MCP); both cover Audit, MCP; overlapping topics (agent, audit, critical, have).
Codex CLI uses MCP / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Codex CLI uses MCP); both cover Apache, MCP; overlapping topics (agent, database).
Claude Code uses MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Claude Code uses MCP); both cover Apache, MCP; overlapping topics (agent, apache, database).
Anthropic released MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Anthropic released MCP); both cover MCP, SQL; overlapping topics (audit, execution, server).