CVE-2026-125322
Received Received - Intake

SQL Injection Oracle in pgEdge Postgres MCP Server

Publication date: 2026-11-10

Last updated on: 2026-11-10

Assigner: GitHub, Inc.

Description
pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, the where parameter of the count_rows tool accepted subqueries against tables other than the table named in the tool call. A caller could use predicates and the returned row count as an inference oracle to extract data from any other table that the connected database role could read. The database privilege boundary remained intact, and the flaw did not grant access to tables outside that role's existing SELECT privileges. This issue is fixed in version 1.1.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-10
Last Modified
2026-11-10
Generated
2026-11-10
AI Q&A
2026-11-10
EPSS Evaluated
N/A
NVD
CVE-2026-125322
EUVD
EUVD-2026-121638

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
pgedge postgres_mcp_server 1.1.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-89 The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
CWE-209 The product generates an error message that includes sensitive information about its environment, users, or associated data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a blind SQL injection flaw in the pgEdge Postgres MCP Server's count_rows tool. The where parameter in the function was directly concatenated into a SQL query without proper sanitization, allowing attackers to inject arbitrary boolean SQL expressions or subqueries against tables not specified in the original call. The flaw enables data enumeration and extraction from any table the connected database role can read, but does not grant access beyond existing SELECT privileges.

Detection Guidance

To detect this vulnerability, monitor SQL query patterns in pgEdge Postgres MCP Server logs for unusual subqueries in the where parameter of count_rows tool calls. Check for boolean-blind or error-based injection attempts by analyzing query responses for count variations. Use PostgreSQL audit logs to track excessive SELECT queries or unexpected table access patterns.

Impact Analysis

An attacker with access to the count_rows tool could infer and extract sensitive data from any table the database role can read by using the row count result as an inference oracle. This allows gradual data extraction through boolean-blind or error-based techniques without direct table access. The impact is limited to data confidentiality breaches within existing privilege boundaries.

Compliance Impact

This vulnerability could lead to unauthorized data access and potential breaches of confidentiality requirements in GDPR and HIPAA. It enables extraction of sensitive personal or health information from databases, violating data protection principles. Organizations using affected versions must upgrade to mitigate compliance risks.

Mitigation Strategies

Immediately upgrade pgEdge Postgres MCP Server to version 1.1.0 or later. Review and restrict SELECT permissions for database roles to only necessary tables. Implement input validation for the where parameter in count_rows tool calls to reject subqueries. Monitor for suspicious query patterns in logs.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-125322. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...