Insecure Access Control in MCP Server Affects Database Security

CVE-2025-59333

What is CVE-2025-59333?

MCP Server, specifically version 1.1.0 and earlier distributed through the npm package @executeautomation/database-server, contains a significant security oversight that fails to adequately enforce a 'read-only' mode. This vulnerability creates an opportunity for malicious actors to exploit access controls, potentially affecting database systems like PostgreSQL. The lack of proper security measures can lead to unauthorized actions, including potential denial of service attacks and other unexpected behavior within the database environment.

References