Skip to content
OpenAdvisories

Product · pgEdge

pgedge-postgres-mcp

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.8
    CVE-2026-126199

    pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible c…

    pgEdge pgedge-postgres-mcp
  • Medium 6.5
    CVE-2026-125322

    pgEdge Postgres MCP Server SQL injection in the count_rows where parameter

    pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, the where parameter of the count_rows tool accepted subqueries against tables other than the table named in the tool…

    pgEdge pgedge-postgres-mcp
  • Medium 6.5
    CVE-2026-125321

    pgEdge Postgres MCP Server login rate limiting can be evaded by a caller-supplied header

    pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, deployments exposing the nondefault HTTP transport with authentication enabled used the leftmost caller-supplied X-F…

    pgEdge pgedge-postgres-mcp
  • Medium 5.3
    CVE-2026-125320

    pgEdge Postgres MCP Server did not validate the Origin header, allowing DNS rebinding

    pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, the HTTP transport did not validate the Origin header on incoming requests. A user who visited an attacker-controlle…

    pgEdge pgedge-postgres-mcp