CVE-2026-87911CWE-184CWE-78command-injection

CVE-2026-87911

Critical · published September 10, 2026

CVSS v3.1
9.6
EPSS
2%
Percentile
77.6
In the wild
Unconfirmed
What it is

An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated actor to execute operating system commands on the host of a self-managed PostgreSQL server by placing a crafted COPY ... TO PROGRAM statement into content that is processed when an authenticated user interacts with the MCP server in its default read-only mode.

To remediate this issue, users should upgrade to version 1.1.7 or later.

The record
Technical detail
CVSS v3.1
9.6 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
9.0 · CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.01738 · 77.6th percentile
Weaknesses
CWE-184 · Incomplete List of Disallowed Inputs; CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-09-10T00:21Z
References (3)
https://aws.amazon.com/security/security-bulletins/2026-104-aws/ · ff89ba41-3aa1-4d27-914a-91399e9639e5https://github.com/awslabs/mcp/security/advisories/GHSA-fph8-pg5w-78fv · ff89ba41-3aa1-4d27-914a-91399e9639e5https://pypi.org/project/awslabs.postgres-mcp-server/1.1.7/ · ff89ba41-3aa1-4d27-914a-91399e9639e5
EPSS history
Timeline
  • 11 SEP 03:19Z
    EPSS moved — → 1%
    epss
  • 09 SEP 19:35Z
    Read-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-server
    cvelistv5