CVE-2026-85787 - An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server to modify data beyond the read-only scope
Summary
CVE-2026-85787 is a vulnerability in Amazon's postgres-mcp-server (a tool for connecting AI systems to PostgreSQL databases) where the SQL validation component doesn't block all dangerous inputs, allowing attackers to craft malicious SQL commands that let them modify data they shouldn't be able to access, even though the server is supposed to be read-only (restricted to viewing data only).
Solution / Mitigation
Update the postgres-mcp-server package to version 1.1.7 or later. The vulnerability affects all PyPI package versions before 1.1.7.
Classification
Affected Vendors
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2026-34371: LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the e
Original source: https://aws.amazon.com/security/security-bulletins/rss/2026-101-aws/
First tracked: September 4, 2026 at 08:01 PM
Classified by LLM (prompt v3) · confidence: 78%