CVE-2026-125322

pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, the where parameter of the count_rows tool accepted subqueries against tables other than the table named in the tool call. A caller could use predicates and the returned row count as an inference oracle to extract data from any other table that the connected database role could read. The database privilege boundary remained intact, and the flaw did not grant access to tables outside that role's existing SELECT privileges. This issue is fixed in version 1.1.0.

• CWE-89
• CWE-209

• https://github.com/pgEdge/pgedge-postgres-mcp/commit/933f1b4cb136183eb307064c1cf1ad2bf015f314
• https://github.com/pgEdge/pgedge-postgres-mcp/issues/200
• https://github.com/pgEdge/pgedge-postgres-mcp/pull/201
• https://github.com/pgEdge/pgedge-postgres-mcp/releases/tag/v1.1.0
• https://github.com/pgEdge/pgedge-postgres-mcp/security/advisories/GHSA-fhv3-x3jh-grj7

Published

Nov 10, 2026

Last Modified

Nov 10, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-12528A flaw was found in 389 Directory Server in the __aclp__norm…5.4
• CVE-2026-12529A security vulnerability has been detected in SourceCodester…7.3
• CVE-2026-1253The Group Chat & Video Chat by AtomChat plugin for WordPress…4.3
• CVE-2026-12530Improper neutralization of argument delimiters in the instal…7.3
• CVE-2026-125320pgEdge Postgres MCP Server enables SQL queries against Postg…5.3
• CVE-2026-125321pgEdge Postgres MCP Server enables SQL queries against Postg…6.5
• CVE-2026-125323pgEdge Control Plane is a distributed application for managi…7.8
• CVE-2026-125325pgEdge RAG Server is an API server for retrieval-augmented g…5.9
• CVE-2026-125326pgEdge RAG Server is an API server for retrieval-augmented g…5.8
• CVE-2026-125342Uninitialized resource in GPU in Google Chrome prior to 157.…
• CVE-2026-125343Buffer overflow in Compositing in Google Chrome prior to 157…
• CVE-2026-125344Type confusion in V8 in Google Chrome prior to 157.0.8103.50…