CVE-2026-85620 | crystaldba postgres-mcp up to 0.3.0 RangeFunction Nodes pg_read_file privileges management

September 4, 2026 Yanac

A vulnerability marked as problematic has been reported in crystaldba postgres-mcp up to 0.3.0. Affected is the function pg_read_file of the component RangeFunction Nodes. This manipulation causes improper privilege management.

This vulnerability is registered as CVE-2026-85620. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More