SQL Injection Vulnerability in Amazon's Postgres MCP Server
CVE-2026-85787

7.1HIGH

Key Information:

Vendor

Amazon

Status
Postgres-mcp-server
Vendor
CVE Published:
4 September 2026

What is CVE-2026-85787?

A vulnerability exists in Amazon's awslabs postgres-mcp-server, where the SQL validation component has an incomplete list of disallowed inputs. This flaw may enable unauthenticated users to perform unauthorized modifications to data, circumventing the established read-only access levels. By submitting specially crafted SQL statements during interactions with the MCP server, an attacker could potentially alter sensitive data. Users are strongly encouraged to update to version 1.1.7 or higher to mitigate this security risk.

Affected Version(s)

postgres-mcp-server 0 < 1.1.7

References

https://pypi.org/project/awslabs.postgres-mcp-server/1.1.7/
patchrelease-notes
https://aws.amazon.com/security/security-bulletins/2026-1...
vendor-advisory

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.