Description
An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server before version 1.1.7 might allow an unauthenticated actor to modify data beyond the read-only scope by placing crafted SQL into the content that is submitted when an authenticated user interacts with the MCP server.



To remediate this issue, users should upgrade to version 1.1.7 or above.
Published: 2026-09-04
Score: 7.1 High
EPSS: < 1% Very Low
KEV: No
Impact: Unauthorized Data Modification
Action: Immediate Patch
AI Analysis

Impact

The vulnerability is an incomplete list of disallowed inputs in the SQL validation component of Amazon awslabs postgres-mcp-server. The weakness can allow an unauthenticated actor to craft SQL that bypasses read‑only restrictions and modify data in the database. The primary impact is unauthorized data modification and potential escalation of privilege, as the flaw is classified under CWE‑184, which denotes unsafe string evaluation that can lead to injection attacks.

Affected Systems

The affected product is Amazon's postgres-mcp-server. Versions prior to 1.1.7 are impacted; version 1.1.7 and later contain the fix. No additional versions are enumerated in the CNA data.

Risk and Exploitability

The CVSS score is 7.1, indicating a moderate‑to‑high risk. The EPSS score is not available, so the exploitation probability is unknown. The flaw is not listed in CISA's KEV catalog. The likely attack vector involves an unauthenticated actor supplying crafted content that is later submitted by an authenticated user to the MCP server, enabling the execution of unintended SQL statements.

Generated by OpenCVE AI on September 4, 2026 at 21:56 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade Amazon awslabs postgres‑mcp‑server to version 1.1.7 or later, as recommended by the vendor.
  • Restrict network access to the MCP server so that only authenticated clients can communicate, thereby limiting unauthenticated actors from injecting content.
  • Implement a strict input‑validation policy that whitelists allowed SQL constructs, preventing any SQL that is not explicitly permitted from reaching the database engine.

Generated by OpenCVE AI on September 4, 2026 at 21:56 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 08 Sep 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 04 Sep 2026 20:30:00 +0000

Type Values Removed Values Added
Description An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server before version 1.1.7 might allow an unauthenticated actor to modify data beyond the read-only scope by placing crafted SQL into the content that is submitted when an authenticated user interacts with the MCP server. To remediate this issue, users should upgrade to version 1.1.7 or above.
Title An incomplete list of disallowed inputs in the SQL validation component of Amazon awslabs postgres-mcp-server
First Time appeared Amazon
Amazon postgres-mcp-server
Weaknesses CWE-184
CPEs cpe:2.3:a:amazon:postgres-mcp-server:*:*:*:*:*:*:*:*
Vendors & Products Amazon
Amazon postgres-mcp-server
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'}

cvssV4_0

{'score': 7.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Amazon Postgres-mcp-server
cve-icon MITRE

Status: PUBLISHED

Assigner: AMZN

Published:

Updated: 2026-09-08T15:53:22.687Z

Reserved: 2026-09-04T17:19:28.586Z

Link: CVE-2026-85787

cve-icon Vulnrichment

Updated: 2026-09-08T15:53:15.925Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-04T21:17:27.057

Modified: 2026-09-08T16:18:19.520

Link: CVE-2026-85787

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-05T03:30:18Z

Weaknesses
  • CWE-184

    Incomplete List of Disallowed Inputs