CVE-2026-126197

pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, custom pl-do tools interpolated JSON arguments into a PostgreSQL DO block delimited by fixed dollar-quote tags. An argument containing $mcpcustomtool$ cou...

CVE-2026-126198

The pgEdge Postgres MCP Server (versions prior to 1.1.0 ) contains a vulnerability where bundled clients, including the CLI and web client , perform write operations without user confirmation. The root cause is that these clients only checked for the query_database tool name instead of honoring s...

CVE-2026-126197

The pgEdge Postgres MCP Server (prior to version 1.1.0 ) is vulnerable to SQL injection via custom pl-do tool parameters . The root cause is the interpolation of JSON arguments into a PostgreSQL DO block using fixed dollar-quote tags. Attackers can use specific strings like $mcp_custom_tool$ to t...