Paper/Archive/CVE-2026-87911

CVE-2026-87911

AWS AWS Labs postgres MCP Server — Read-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-server

EPSS 2%CVSS 9.6

critical.is priorityof 100

CVSS 9.6 (CNA)9.6 / 10 × 3028.8 Not in CISA KEV+300.0 EPSS percentile 77.7.777 × 2015.5 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated actor to execute operating system commands on the host of a self-managed PostgreSQL server by placing a crafted COPY ... TO PROGRAM statement into content that is processed when an authenticated user interacts with the MCP server in its default read-only mode. To remediate this issue, users should upgrade to version 1.1.7 or later.

Affected

ProductAffectedFixed inSource

AWS Labs postgres MCP Server< 1.1.71.1.7CNA

Scores by source

AMZN (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

AMZN (CNA)9.0CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

patchpypi.org/project/awslabs.postgres-mcp-server/1.1.7 advisoryaws.amazon.com/security/security-bulletins/2026-104-aws writeupgithub.com/awslabs/mcp/security/advisories/GHSA-fph8-pg5w-78fv