{"data":{"id":"328b59c6-48f8-4e0d-9e3c-7ed5e7411322","title":"CVE-2026-85787 - An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server to modify data beyond the read-only scope","summary":"CVE-2026-85787 is a vulnerability in Amazon's postgres-mcp-server (a tool for connecting AI systems to PostgreSQL databases) where the SQL validation component doesn't block all dangerous inputs, allowing attackers to craft malicious SQL commands that let them modify data they shouldn't be able to access, even though the server is supposed to be read-only (restricted to viewing data only).","solution":"Update the postgres-mcp-server package to version 1.1.7 or later. The vulnerability affects all PyPI package versions before 1.1.7.","labels":["security"],"sourceUrl":"https://aws.amazon.com/security/security-bulletins/rss/2026-101-aws/","publishedAt":"2026-09-04T20:08:08.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["Amazon"],"affectedVendorsRaw":["Amazon","awslabs","postgres-mcp-server"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-09-04T20:08:08.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.78,"researchCategory":null,"atlasIds":null}}