CVE-2026-125322

A row-count query could reveal data from other readable tables

pgEdge · Postgres MCP Server row-count tool

First documented disclosure · Review checkpoint

Summary

The tool allowed its filtering expression to depend on tables outside the requested table. The resulting counts could reveal data within the role’s existing permissions.

Severity and exploitation evidence

Medium · 6.5/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed advisory does not report malicious exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The tool allowed its filtering expression to depend on tables outside the requested table.

Conditions required

A caller had access to the tool. The database role already had read privileges on the other tables.

Potential impact

The resulting counts could reveal data within the role’s existing permissions.

Affected versions and configurations

Before 1.1.0.

Fix and mitigation status

1.1.0.

Practical next steps

Upgrade and grant the server’s database role only its required table permissions.

Operating lesson

Give AI retrieval and tool services database credentials scoped to the data they need.

Evidence and limits

The public disclosure was on 2026-09-03. The CVE record was published on 2026-11-10.

Sources