CVE-2026-87911
CriticalCVSS 9.6Summary
An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated actor to execute operating system commands on the host of a self-managed PostgreSQL server by placing a crafted COPY ... TO PROGRAM statement into content that is processed when an authenticated user interacts with the MCP server in its default read-only mode.
Risk Assessment
Risk includes remote OS command execution on the PostgreSQL host, potentially leading to full host compromise, data confidentiality and integrity breaches, and service disruption.
Recommendation
Upgrade postgres-mcp-server to version 1.1.7 or later, which addresses this vulnerability.
Other vulnerabilities in postgres-mcp-server
Original NVD description (English source)
An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated actor to execute operating system commands on the host of a self-managed PostgreSQL server by placing a crafted COPY ... TO PROGRAM statement into content that is processed when an authenticated user interacts with the MCP server in its default read-only mode. To remediate this issue, users should upgrade to version 1.1.7 or later.