4 matches found
CVE-2026-126198
pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, the bundled clients, including the CLI and web client, decided whether to request write confirmation by checking only for the querydatabase tool name...
CVE-2026-126199
The pgEdge Postgres MCP Server (prior to version 1.1.0 ) contains a vulnerability where the bundled CLI and web clients fail to request user confirmation for specific write operations. The root cause is that the application classifies query_database statements based only on the first keyword. Con...
CVE-2026-126198
The pgEdge Postgres MCP Server (versions prior to 1.1.0 ) contains a vulnerability where bundled clients, including the CLI and web client , perform write operations without user confirmation. The root cause is that these clients only checked for the query_database tool name instead of honoring s...
