Vulnerability · Published Sep 9, 2026 · Assigned by AMZN
CVE-2026-87911Read-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-server
Critical 9.6
In plain English
A critical-severity OS command injection in AWS Labs postgres MCP Server from AWS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.7% (higher than 78% of all known vulnerabilities).
Official description
An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated actor to execute operating system commands on the host of a self-managed PostgreSQL server by placing a crafted COPY ... TO PROGRAM statement into content that is processed when an authenticated user interacts with the MCP server in its default read-only mode. To remediate this issue, users should upgrade to version 1.1.7 or later.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| AWS | AWS Labs postgres MCP Server | 0 – before 1.1.7 |
Weakness: CWE-78, CWE-184 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H