SQL Injection Vulnerability in pgEdge Postgres MCP Server

CVE-2026-126196

What is CVE-2026-126196?

The pgEdge Postgres MCP Server, which facilitates SQL querying on PostgreSQL databases through Model Context Protocol-compatible clients, includes a vulnerability affecting versions prior to 1.1.0. This issue allows execution of unrecognized SQL statements through the query_database method on a read_only connection, potentially enabling an attacker to execute multiple semicolon-separated statements in a single request. As a result, it is possible to alter transaction or session states alongside database writes, leading to potential exposure of sensitive data and compromising database integrity. The flaw particularly impacts installations that rely on the read_only setting as a security measure. Importantly, this vulnerability does not pose a confidentiality risk beyond the information already accessible via the connection. Users are advised to upgrade to version 1.1.0 or later to mitigate this risk.

References