pgEdge Postgres MCP Server SQL Injection (CVE-2026-126197)
The pgEdge Postgres MCP Server before 1.1.0 is vulnerable to SQL injection in custom pl-do tools via improper handling of JSON arguments.
CVE search metadata
CVE search record: CVE-2026-126197. Severity: high. CVSS: 8.8. KEV: no. Product: Postgres MCP Server (< 1.1.0). Brief: pgEdge Postgres MCP Server SQL Injection (CVE-2026-126197). Brief link: https://feed.craftedsignal.io/briefs/2026-11-pgedge-sql-injection-cve-2026-126197/
Triage facts
Revision 1- Applicability
- Postgres MCP Server (< 1.1.0)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 12, 18:51 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
Prior to version 1.1.0, the pgEdge Postgres MCP Server custom pl-do tools incorrectly interpolated JSON arguments into PostgreSQL DO blocks using fixed dollar-quote tags. An attacker can use specific argument values, such as $mcp_custom_tool$ or $mcp_args$, to terminate the block and inject arbitrary SQL or procedural code.
Impact
This vulnerability allows attackers to bypass read-only restrictions, potentially accessing or modifying data and resources accessible to the database role connected to the server.
Recommendation
Upgrade the pgEdge Postgres MCP Server to version 1.1.0 or later.