postgres-mcp vulnerabilities

1 known vulnerability in postgres-mcp from Crystaldba. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  postgres-mcp: Incorrect Authorization

  CVE-2026-85620Sep 4, 2026Crystaldba

  Postgres MCP Pro 0.3.0 contains a restricted-mode bypass vulnerability where function-name validation is not applied to RangeFunction nodes in FROM clauses. Attackers can execute file-reading functions like pg_read_file through FROM-clause syntax to read arbit