CVE-2026-126198

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-126198
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-126198.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-126198
Aliases
  • GHSA-v44x-hxg7-5cgc
Published
2026-11-12T17:31:01Z
Modified
2026-11-13T02:47:06Z
Severity
  • 3.1 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N CVSS Calculator
Summary
pgEdge Postgres MCP Server custom tools performed writes without user confirmation
Details

pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, the bundled clients, including the CLI and web client, decided whether to request write confirmation by checking only for the query_database tool name instead of server-published write annotations. Custom pl-do, pl-func, and writing sql tools therefore ran without confirmation on allow_writes connections, including when a model followed instructions in retrieved content. The affected control is a bundled-client warning rather than a server authorization boundary, and other MCP clients do not inherit that prompt. This issue is fixed in 1.1.0.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-357"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/126xxx/CVE-2026-126198.json"
}
References

Affected packages

Git / github.com/pgedge/pgedge-postgres-mcp

Affected ranges

Type
GIT
Repo
https://github.com/pgedge/pgedge-postgres-mcp
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
25c2aaed03398584ceea0dd71f7f67631c3dff4e
Fixed
c86d5cbe6d65c6debd0d0e909ce320271caa4d90
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "1.1.0"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StringRangeExpression"
        },
        {
            "range": [
                {
                    "fixed": "c86d5cbe6d65c6debd0d0e909ce320271caa4d90"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "original_tag": "v1.1.0",
            "range": [
                {
                    "fixed": "25c2aaed03398584ceea0dd71f7f67631c3dff4e"
                }
            ],
            "source": "REFERENCES_TAG"
        }
    ]
}

Affected versions

Other
kb-2026-04-22
kb-2026-04-27
v1.*
v1.0.0
v1.0.0-alpha1
v1.0.0-alpha2
v1.0.0-alpha3
v1.0.0-alpha4
v1.0.0-alpha5
v1.0.0-alpha6
v1.0.0-beta1
v1.0.0-beta3
v1.0.0-beta3a

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-126198.json"