CVE-2026-126197 | pgEdge Postgres MCP Server up to 1.0.x pl-do mcp_custom_tool/mcp_args sql injection

November 12, 2026 Yanac

A vulnerability classified as critical was found in pgEdge Postgres MCP Server up to 1.0.x. This vulnerability affects unknown code of the component pl-do. Executing a manipulation of the argument mcp_custom_tool/mcp_args can lead to sql injection.

This vulnerability is registered as CVE-2026-126197. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More