CVE-2026-126199
pgEdge Postgres MCP Server write confirmation skipped for writes that begin with a reading keyword
pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, the bundled CLI and web clients classified query_database statements only by their first keyword before deciding whether to display a write confirmation. SELECT INTO, data-modifying common table expressions beginning with WITH, and EXPLAIN ANALYZE of a write were treated as reads and could execute without confirmation on an allow_writes connection. Read-only connections remain protected by PostgreSQL transaction access mode, and EXPLAIN without ANALYZE and SELECT FOR UPDATE remain classified as reads. This issue is fixed in 1.1.0.
| CWE | CWE-357 |
| Vendor | pgedge |
| Product | pgedge-postgres-mcp |
| Published | Nov 12, 2026 |
Get instant alerts for pgedge pgedge-postgres-mcp
Be the first to know when new medium vulnerabilities affecting pgedge pgedge-postgres-mcp are published — delivered to Slack, Telegram or Discord.
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H