pgEdge vulnerabilities
13 published CVEs name pgEdge among the affected products.
- 13Published CVEs13 of them scored
- 13Last 12 monthspublished in the last year
- 0Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-126199
pgEdge Postgres MCP Server write confirmation skipped for writes that begin with a reading keyword
pgEdge · pgedge-postgres-mcp
Medium6.8 - CVE-2026-126198
pgEdge Postgres MCP Server custom tools performed writes without user confirmation
pgEdge · pgedge-postgres-mcp
Low3.1 - CVE-2026-126197
pgEdge Postgres MCP Server SQL injection through custom pl-do tool parameters
pgEdge · pgedge-postgres-mcp
High8.8 - CVE-2026-126196
pgEdge Postgres MCP Server read-only mode can be bypassed by SQL statement smuggling through query_database
pgEdge · pgedge-postgres-mcp
High8.1 - CVE-2026-125328
pgEdge Go LLM Library discloses provider API key fragments in error messages
pgEdge · pgedge-go-llm-lib
Medium5.8 - CVE-2026-125327
pgEdge RAG Server unbounded corpus read allows resource exhaustion from unauthenticated requests
pgEdge · pgedge-rag-server
High7.5 - CVE-2026-125326
pgEdge RAG Server discloses part of the configured provider credential through API error messagespgEdge RAG Server discloses part of the configured provider credential through API error messages
pgEdge · pgedge-rag-server
Medium5.8 - CVE-2026-125325
pgEdge RAG Server shared keyword index leaked results between concurrent unauthenticated requests
pgEdge · pgedge-rag-server
Medium5.9 - CVE-2026-125323
pgEdge Control Plane generates pg_hba.conf with trust authentication for local and loopback connections
pgEdge · control-plane
High7.8 - CVE-2026-125322
pgEdge Postgres MCP Server SQL injection in the count_rows where parameter
pgEdge · pgedge-postgres-mcp
Medium6.5