CVE-2026-87911

CRITICAL 9.6

Read-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-server

CVSS Score

9.6

EPSS Score

0.0%

EPSS Percentile

0th

An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated actor to execute operating system commands on the host of a self-managed PostgreSQL server by placing a crafted COPY ... TO PROGRAM statement into content that is processed when an authenticated user interacts with the MCP server in its default read-only mode. To remediate this issue, users should upgrade to version 1.1.7 or later.

CWE	CWE-78 CWE-184
Vendor	aws
Product	aws labs postgres mcp server
Published	Sep 9, 2026
Last Updated	Sep 10, 2026

Stay Ahead of the Next One

Get instant alerts for aws aws labs postgres mcp server

Be the first to know when new critical vulnerabilities affecting aws aws labs postgres mcp server are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

AWS / AWS Labs postgres MCP Server

0 < 1.1.7

References

NVD ↗ CVE.org ↗ EPSS Data ↗

pypi.org: https://pypi.org/project/awslabs.postgres-mcp-server/1.1.7/ aws.amazon.com: https://aws.amazon.com/security/security-bulletins/2026-104-aws/ github.com: https://github.com/awslabs/mcp/security/advisories/GHSA-fph8-pg5w-78fv

Credits

Corsen AI