CVE-2026-126196

Name of the Vulnerable Software and Affected Versions pgEdge Postgres MCP Server versions prior to 1.1.0

Description The query database function on a read-only connection may send unrecognized statements through pgx Exec without bind parameters. This triggers the use of PostgreSQL's simple query protocol, which allows multiple semicolon-separated statements within a single request. If the connecting role possesses write privileges, a caller can combine session state or transaction changes with database writes. Additionally, pooled session state may result in subsequent calls remaining writable, compromising the integrity and availability of deployments that rely on the read-only setting as a security boundary.

Recommendations Update pgEdge Postgres MCP Server to version 1.1.0.