SQL Injection Vulnerability in pgEdge Postgres MCP Server
CVE-2026-125320

5.3MEDIUM

Key Information:

Vendor

Pgedge

Status
Pgedge-postgres-mcp
Vendor
CVE Published:
10 November 2026

What is CVE-2026-125320?

The pgEdge Postgres MCP Server allows SQL queries to be executed against PostgreSQL databases using Model Context Protocol compatible clients. Before version 1.1.0, it exposed a vulnerability due to improper validation of the Origin header on incoming HTTP requests. This flaw could enable an attacker to exploit DNS rebinding tactics, targeting users who visit a malicious page. If successful, the attacker could access a locally running server, gaining sensitive information from the database schemas and query results. The vulnerability specifically affects setups where HTTP transport is enabled, alongside a browser on the same machine, while the standard stdio transport remains unexposed. The issue has been patched in version 1.1.0.

Affected Version(s)

pgedge-postgres-mcp < 1.1.0

References

https://github.com/pgEdge/pgedge-postgres-mcp/security/ad...
x_refsource_CONFIRM
https://github.com/pgEdge/pgedge-postgres-mcp/issues/231
x_refsource_MISC
https://github.com/pgEdge/pgedge-postgres-mcp/pull/232
x_refsource_MISC

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.