CVE-2026-87911

critical · 9

An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated actor to execute operating system commands on the host of a self-managed PostgreSQL server by placing a crafted COPY ... TO PROGRAM statement into content that is processed when an authenticated user interacts with the MCP server in its default read-only mode. To remediate this issue, users should upgrade to version 1.1.7 or later.

CVSS

1.7%

EPSS (exploit prob.)

78th

EPSS percentile

2026-09-09

Published

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-78CWE-184

References

https://aws.amazon.com/security/security-bulletins/2026-104-aws/
https://github.com/awslabs/mcp/security/advisories/GHSA-fph8-pg5w-78fv
https://pypi.org/project/awslabs.postgres-mcp-server/1.1.7/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-87911