Skip to content

CVE record · 1 source

CVE-2026-125320

CVSS 5.3

pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients.

Vendor: PgEdge
Product: pgedge-postgres-mcp
CVSS v3.1: 5.3 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Weakness: CWE-346
Exposure class: Database, AI infrastructure

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

28

CVE NVD 4h ago

pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients.

pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, the HTTP transport did not validate the Origin header on incoming requests. A user who…

CVSS 5.3 Fix available CVE-2026-125320 PgEdge