CVE-2026-126198

Name of the Vulnerable Software and Affected Versions pgEdge Postgres MCP Server versions prior to 1.1.0

Description Bundled clients, such as the CLI and web client, failed to properly request write confirmation by checking only for the query database tool name instead of utilizing server-published write annotations. This allows custom pl-do, pl-func, and writing sql tools to execute without confirmation on allow writes connections, even if a model follows instructions found in retrieved content. This issue pertains to a bundled-client warning and does not affect other MCP clients.

Recommendations Update pgEdge Postgres MCP Server to version 1.1.0.