CVE-2026-87911

critical

An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an…

An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated actor to execute operating system commands on the host of a self-managed PostgreSQL server by placing a crafted COPY ... TO PROGRAM statement into content that is processed when an authenticated user interacts with the MCP server in its default read-only mode. To remediate this issue, users should upgrade to version 1.1.7 or later.

CVSS

9.6

9.6 (CVSS v3.1)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Severity source: NVD CVSS v3.1 (ff89ba41-3aa1-4d27-914a-91399e9639e5)

Timeline (UTC)

Published: 2026-09-09 20:21

Modified: 2026-09-10 15:53

NVD status: Deferred

Last synced 1 day ago

Verified against the source API 2026-10-27 06:52 UTC

Exploitation

Not listed in CISA KEV (as of last catalog sync)

Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).

Affected products

Not reported by the source (unknown — not "none").

Weakness classification (CWE)

CWE-78 CWE-184

Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.

Mitigation & advisories

No vendor advisory or patch reference tagged by NVD. Check the references below.

References

https://aws.amazon.com/security/security-bulletins/2026-104-aws/ ff89ba41-3aa1-4d27-914a-91399e9639e5
https://github.com/awslabs/mcp/security/advisories/GHSA-fph8-pg5w-78fv ff89ba41-3aa1-4d27-914a-91399e9639e5
https://pypi.org/project/awslabs.postgres-mcp-server/1.1.7/ ff89ba41-3aa1-4d27-914a-91399e9639e5

Data sources

NVD CVE API 2.0 — fetched 2026-10-27 06:52 UTC · record ↗

Learn the basics

Understanding CVEs and CVSS Scores