CVE-2026-125322

pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, the where parameter of the countrows tool accepted subqueries against tables other than the table named in the tool call. A caller could use predicates an...

CVE-2026-125321

pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, deployments exposing the nondefault HTTP transport with authentication enabled used the leftmost caller-supplied X-Forwarded-For value as the client addre...

CVE-2026-125320

The pgEdge Postgres MCP Server (versions prior to 1.1.0 ) contains a vulnerability where the HTTP transport fails to validate the Origin header on incoming requests. This flaw allows an attacker to perform a DNS rebinding attack against a user visiting a malicious webpage. If the server is runnin...