Postgres Mcp Server
Monthly
Incomplete SQL validation denylist in Amazon awslabs postgres-mcp-server before 1.1.7 allows an unauthenticated attacker to bypass read-only enforcement and perform write operations against a PostgreSQL database by embedding crafted SQL in content processed when an authenticated user interacts with the MCP server. The vulnerability (CWE-184) exploits the incomplete list of disallowed SQL constructs, effectively turning user-triggered MCP interactions into a vector for unauthorized data modification with high integrity impact (VI:H) and no confidentiality or availability effect. No public exploit code has been identified at time of analysis; a vendor-released patch is available at version 1.1.7.
Incomplete SQL validation denylist in Amazon awslabs postgres-mcp-server before 1.1.7 allows an unauthenticated attacker to bypass read-only enforcement and perform write operations against a PostgreSQL database by embedding crafted SQL in content processed when an authenticated user interacts with the MCP server. The vulnerability (CWE-184) exploits the incomplete list of disallowed SQL constructs, effectively turning user-triggered MCP interactions into a vector for unauthorized data modification with high integrity impact (VI:H) and no confidentiality or availability effect. No public exploit code has been identified at time of analysis; a vendor-released patch is available at version 1.1.7.