Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server before version 1.1.7 might allow an unauthenticated actor to modify data beyond the read-only scope by placing crafted SQL into the content that is submitted when an authenticated user interacts with the MCP server. To remediate this issue, users should upgrade to version 1.1.7 or above.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-09-04 | 2 | Disclosure1Patch1 |
| 2026-09-16 | 1 | Disclosure1 |
Your "read-only" Postgres MCP agent could still flip row security off and change data. Bump awslabs.postgres-mcp-server to 1.1.7+. CVE-2026-85787 https://hol.org/blog/cve-2026-85787-awslabs-postgres-mcp-sql-denylist-bypass https://t.co/gVL03Z4WoQ
Post summary
The note alerts that a read‑only Postgres MCP agent can bypass row security, cites CVE‑2026‑85787, and advises upgrading to version 1.1.7+ as a fix.
CVE-2026-85787 - An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server to modify data beyond the read-only scope > この脆弱性により、認証されていない攻撃者が、認証済みユーザーが MCP サーバーとやり取りする際に送信されるコンテンツに細工された SQL を挿入することで、読み取り専用範囲を超えてデータを変更できる可能性があります。 https://aws.amazon.com/jp/security/security-bulletins/2026-101-aws/
Post summary
The post discloses CVE-2026-85787, an SQL injection flaw in Amazon awslabs postgres-mcp-server that lets unauthenticated attackers modify data beyond the intended read-only scope, and points to an AWS security bulletin for more information.
Nueva vulnerabilidad CVE-2026-85787 (severidad: Alta) del fabricante AWS: Validación SQL incompleta en awslabs postgres-mcp-server versiones anteriores a 1.1.7 permite a un actor no autenticado modificar datos fuera del alcance de solo lectura mediante SQL manipulado.
Post summary
The post announces a new high‑severity vulnerability (CVE-2026-85787) in AWS awslabs postgres‑mcp‑server prior to v1.1.7, describing incomplete SQL validation that lets unauthenticated users modify data beyond read‑only limits.