executeautomation @executeautomation/database-server vulnerabilities

Latest executeautomation @executeautomation/database-server CVEs

Newest publication first

1. CVE-2025-59333 @executeautomation/database-server does not properly restrict access, bypassing a "read-only" mode

   Published 2025-09-16

   High·CVSS 8.1

   The mcp-database-server (MCP Server) 1.1.0 and earlier, as distributed via the npm package @executeautomation/database-server, fails to implement adequate security controls to properly enforce a "read-only" mode. This vulnerability affects only the npm distribution; other distrib...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.