Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-85620— Postgres MCP Pro 0.3.0 Restricted-Mode Bypass via FROM-Clause Function

Quick assessment

Affected
crystaldba postgres-mcp
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Postgres MCP Pro 0.3.0 存在一个限制模式绕过漏洞：在 FROM 子句中，RangeFunction 节点未进行函数名验证。攻击者可以利用 FROM 子句语法执行如 等文件读取函数，从而在受限模式保护下读取任意文件。

CVSS 8.6 · High

Possible ATT&CK Techniques 1 AI

T1083 · File and Directory Discovery

Affected Version Matrix 1

VendorProduct Version RangeStatus
crystaldba postgres-mcp ≤ 0.3.0 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-85620

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Postgres MCP Pro 0.3.0 Restricted-Mode Bypass via FROM-Clause Function
Source: CVE Program / CVE List V5
Vulnerability Description
Postgres MCP Pro 0.3.0 contains a restricted-mode bypass vulnerability where function-name validation is not applied to RangeFunction nodes in FROM clauses. Attackers can execute file-reading functions like pg_read_file through FROM-clause syntax to read arbitrary files despite restricted-mode protections.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制不正确
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
crystaldba postgres-mcp 0 ~ 0.3.0 -

II. Public POCs for CVE-2026-85620

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-85620

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-85620 (1)

Proof of Concept for CVE-2026-85620 (1)

IV. Related Vulnerabilities

Same weakness: CWE-863

V. Comments for CVE-2026-85620

No comments yet

Leave a comment