Skip to content
OpenAdvisories

Vendor

pgEdge

13 known vulnerabilities.

Products

pgedge-postgres-mcp 7 pgedge-rag-server 3 control-plane 1 pgedge-go-llm-lib 1 Spock 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.1
    CVE-2026-126198

    pgEdge Postgres MCP Server custom tools performed writes without user confirmation

    pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, the bundled clients, including the CLI and web client, decided whether to request write confirmation by checking onl…

    pgEdge pgedge-postgres-mcp