Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2026-87911 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated actor to execute operating system commands on the host of a self-managed PostgreSQL server by placing a crafted COPY ... TO PROGRAM statement into content that is processed when an authenticated user interacts with the MCP server in its default read-only mode. To remediate this issue, users should upgrade to version 1.1.7 or later.

Metrics

CVSS 3.x Severity and Vector Strings:

VolerionCVSS-B:8.3 HIGHVector:CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

CNA: AMZNCVSS-B:9.6 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://aws.amazon.com/security/security-bulletins/2026-104-aws/	AMZN	AdvisoryRemedyVendor
https://github.com/awslabs/mcp/security/advisories/GHSA-fph8-pg5w-78fv	AMZN	AdvisoryRemedyVendor
https://pypi.org/project/awslabs.postgres-mcp-server/1.1.7/	AMZN	ProductVendor

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-184	Incomplete List of Disallowed Inputs	AMZN
CWE-78	Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')	AMZN

Affected Products

Product	Versions
Amazon awslabs postgres-mcp-server	< 1.1.7 (semver)
CPE No CPEs found in CPE dictionary for this product. Remediation Upgrade: 1.1.7moderate efforthttps://pypi.org/project/awslabs.postgres-mcp-server/1.1.7/ Mitigation:low effort Connect the MCP server using a dedicated Postgres role that has only the privileges it actually needs. In particular: - Do not connect as a superuser, rds_superuser, or the cluster master user. - For read-only use, grant only CONNECT + USAGE + SELECT on the schemas the agent needs, and force read-only transactions at the role level. - For read/write use, grant only the specific INSERT/UPDATE/DELETE privileges required, scoped to the necessary schemas and tables.

Product

Versions

Amazon awslabs postgres-mcp-server

< 1.1.7 (semver)

CPE

No CPEs found in CPE dictionary for this product.

Remediation

Upgrade: 1.1.7moderate efforthttps://pypi.org/project/awslabs.postgres-mcp-server/1.1.7/
Mitigation:low effort
Connect the MCP server using a dedicated Postgres role that has only the privileges it actually needs. In particular: - Do not connect as a superuser, rds_superuser, or the cluster master user. - For read-only use, grant only CONNECT + USAGE + SELECT on the schemas the agent needs, and force read-only transactions at the role level. - For read/write use, grant only the specific INSERT/UPDATE/DELETE privileges required, scoped to the necessary schemas and tables.

Change History

2 change records found show changes

Date	Action	Recorded By
Sep 10, 2026	CVE Modified	CISA-ADP
Sep 9, 2026	New CVE Received	AMZN