SQL Query Vulnerability in pgEdge Postgres MCP Server

CVE-2026-126198

What is CVE-2026-126198?

The pgEdge Postgres MCP Server allows SQL queries via Model Context Protocol compliant clients but has a vulnerability where bundled clients neglect to properly request write confirmation in certain scenarios. Specifically, prior to version 1.1.0, the server would only check the query_database tool name instead of adhering to server-published write annotations. Consequently, custom PL/DO functions and write SQL tools were executed without necessary confirmation on allow_writes connections, including instances when a model linked to retrieved content. This flaw is rooted in insufficient client-side warnings as opposed to server-level authorization, creating a potential risk for unintended database modifications. The issue has been resolved in version 1.1.0.

References