pgEdge pgedge-postgres-mcp vulnerabilities
7 published CVEs name pgEdge pgedge-postgres-mcp among the affected products.
- 7Published CVEs7 of them scored
- 7Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-126199
pgEdge Postgres MCP Server write confirmation skipped for writes that begin with a reading keyword
pgEdge · pgedge-postgres-mcp
Medium6.8 - CVE-2026-126198
pgEdge Postgres MCP Server custom tools performed writes without user confirmation
pgEdge · pgedge-postgres-mcp
Low3.1 - CVE-2026-126197
pgEdge Postgres MCP Server SQL injection through custom pl-do tool parameters
pgEdge · pgedge-postgres-mcp
High8.8 - CVE-2026-126196
pgEdge Postgres MCP Server read-only mode can be bypassed by SQL statement smuggling through query_database
pgEdge · pgedge-postgres-mcp
High8.1 - CVE-2026-125322
pgEdge Postgres MCP Server SQL injection in the count_rows where parameter
pgEdge · pgedge-postgres-mcp
Medium6.5 - CVE-2026-125321
pgEdge Postgres MCP Server login rate limiting can be evaded by a caller-supplied header
pgEdge · pgedge-postgres-mcp
Medium6.5 - CVE-2026-125320
pgEdge Postgres MCP Server did not validate the Origin header, allowing DNS rebinding
pgEdge · pgedge-postgres-mcp
Medium5.3