Vibe Coding
CVE-2026-85787: AWS's own postgres-mcp-server had an incomplete SQL denylist letting writes past read-only scope
Amazon awslabs postgres-mcp-server before 1.1.7 has an incomplete list of disallowed inputs in its SQL validation component, so an unauthenticated actor can modify data beyond the read-only scope by placing crafted SQL into content an authenticated user later submits through the MCP server. Upgrade to 1.1.7 or later. Landing the same day as the Postgres MCP Pro RangeFunction bypass, two independent Postgres MCP servers failed read-only enforcement in the same 24 hours.
Source
↳ Follow the thread