CVE-2026-85787 - An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server to modify data beyond the read-only scope
Awslabs Postgres ยท 2026-10-25
Actions
Technical Details
| Affected Versions | < 1.1.7 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-85787 |
| Migration Required | Yes |
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update the Postgres MCP Server to version 1.1.7 to address the security vulnerability and ensure the server runs with minimal-privilege roles to enforce boundaries.
For Platform Teams
Deploy the updated Postgres MCP Server version and configure it with minimal-privilege roles to enhance security and reduce the risk of unauthorized data modifications.
For Executives
Implement the security patch for the Postgres MCP Server to mitigate the risk of unauthorized data modification and ensure data integrity.