CVE-2026-126199

Name of the Vulnerable Software and Affected Versions pgEdge Postgres MCP Server versions prior to 1.1.0

Description The bundled CLI and web clients incorrectly classify query database statements by evaluating only the first keyword to determine if a write confirmation is required. Consequently, statements such as SELECT INTO, data-modifying common table expressions starting with WITH, and EXPLAIN ANALYZE of a write operation are treated as read-only. This allows these operations to execute without confirmation on connections where allow writes is enabled.

Recommendations Update to version 1.1.0.