SQL Injection Vulnerability in pgEdge Postgres MCP Server
CVE-2026-125322

6.5MEDIUM

Key Information:

Vendor

Pgedge

Status
Pgedge-postgres-mcp
Vendor
CVE Published:
10 November 2026

What is CVE-2026-125322?

The pgEdge Postgres MCP Server has a vulnerability in the count_rows tool that allows attackers to perform subqueries on unauthorized tables. This occurs due to improper handling of the where parameter prior to version 1.1.0. Attackers can exploit this flaw to extract sensitive information through inference while remaining within the database role's existing SELECT privileges. This issue has been addressed in version 1.1.0, enhancing the security model to prevent such unauthorized access.

Affected Version(s)

pgedge-postgres-mcp < 1.1.0

References

https://github.com/pgEdge/pgedge-postgres-mcp/security/ad...
x_refsource_CONFIRM
https://github.com/pgEdge/pgedge-postgres-mcp/issues/200
x_refsource_MISC
https://github.com/pgEdge/pgedge-postgres-mcp/pull/201
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.