CVE-2026-85787

An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server before version 1.1.7 might allow an unauthenticated actor to modify data beyond the read-only scope by placing crafted SQL into the content that is submitted when an authenticated user interacts with the MCP server. To remediate this issue, users should upgrade to version 1.1.7 or above.

Score

CVSS 4.0 7.1 High

Status

Awaiting Analysis - ff89ba41-3aa1-4d27-914a-91399e9639e5

Published

2026-09-04

Last modified

2026-09-08

Weaknesses

CWE-184

Affected products

• Postgres-mcp-server (Amazon)

References

• https://aws.amazon.com/security/security-bulletins/2026-101-aws/
• https://pypi.org/project/awslabs.postgres-mcp-server/1.1.7/