CVE-2026-125320

The pgEdge Postgres MCP Server (versions prior to 1.1.0 ) contains a vulnerability where the HTTP transport fails to validate the Origin header on incoming requests. This flaw allows an attacker to perform a DNS rebinding attack against a user visiting a malicious webpage. If the server is runnin...