Insecure Access Control in MCP Server Affects Database Security

CVE-2025-59333

What is CVE-2025-59333?

MCP Server, specifically version 1.1.0 and earlier distributed through the npm package @executeautomation/database-server, contains a significant security oversight that fails to adequately enforce a 'read-only' mode. This vulnerability creates an opportunity for malicious actors to exploit access controls, potentially affecting database systems like PostgreSQL. The lack of proper security measures can lead to unauthorized actions, including potential denial of service attacks and other unexpected behavior within the database environment.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References