Login Request a demo
Medium severity · published Sep 4, 2026
CVE-2026-85787
An incomplete list of disallowed inputs in the SQL validation component of Amazon awslabs postgres-mcp-server
6.5
CVSS
0.3%
EPSS
No
On KEV
Description
An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server before version 1.1.7 might allow an unauthenticated actor to modify data beyond the read-only scope by placing crafted SQL into the content that is submitted when an authenticated user interacts with the MCP server. To remediate this issue, users should upgrade to version 1.1.7 or above.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PO
postgres-mcp-server · Amazon
before 1.1.7 · source: vendor
Affected product
PO
postgres-mcp-server
Amazon
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-85787
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-85787
aws.amazon.com
https://aws.amazon.com/security/security-bulletins/2026-101-aws/
pypi.org
https://pypi.org/project/awslabs.postgres-mcp-server/1.1.7/