vuldb.comadvisoryCVE-2026-85787 in postgres-mcp-server
CVE-2026-85787 affects awslabs postgres-mcp-server before 1.1.7. The SQL validation component uses an incomplete list of disallowed inputs. Crafted SQL placed in content submitted while an authenticated user interacts with the MCP server can bypass the read-only restriction and modify data in PostgreSQL. The fix is to upgrade to 1.1.7 or later. VulDB's added analysis is generic: it points to SQL injection (CWE-89) and recommends least-privilege database accounts and parameterized queries.
TL;DR awslabs postgres-mcp-server before 1.1.7 has a deny-list gap in SQL validation that lets crafted SQL bypass read-only mode and modify data; upgrade to 1.1.7.
Organisations named here
- CWE-89
- T1059
CVEs named here
- CVE-2026-85787
Technologies named here
- postgres-mcp-server
- Amazon awslabs postgres-mcp-server before version 1.1.7
- VulDB
- Model Context Protocol
- PostgreSQL
- AWS
Techniques named here
- SQL injection
- CWE-798
- T1059 Command and Scripting Interpreter via SQL commands
Related in AppSec
github.comadvisoryFlowise MCP Security Bypass Enables RCE
huntress.comwriteupInside an Oracle Database SQL Injection Attack | Huntress
github.comrepoOASIS
blog.trailofbits.comwriteup