Skip to content
OpenAdvisories

Product · pgEdge

pgedge-postgres-mcp

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-126197

    pgEdge Postgres MCP Server SQL injection through custom pl-do tool parameters

    pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, custom pl-do tools interpolated JSON arguments into a PostgreSQL DO block delimited by fixed dollar-quote tags. An a…

    pgEdge pgedge-postgres-mcp
  • High 8.1
    CVE-2026-126196

    pgEdge Postgres MCP Server read-only mode can be bypassed by SQL statement smuggling through query_database

    pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, query_database on a read_only connection could send unrecognized statements through pgx Exec without bind parameters…

    pgEdge pgedge-postgres-mcp