SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-85620

HIGH · CVSS 8.6 EPSS 0.37% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-04 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

Postgres MCP Pro 0.3.0 is vulnerable to a bypass of restricted-mode protections, allowing attackers to exploit improperly validated RangeFunction nodes in FROM clauses. This flaw enables the execution of file-reading functions, such as pg_read_file, granting unauthorized access to arbitrary files on the system. Organizations using this version of Postgres MCP Pro should prioritize remediation to mitigate the risk of sensitive data exposure.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-85620
Severity
HIGH
CVSS
8.6
EPSS
0.37%

Original NVD Description

Postgres MCP Pro 0.3.0 contains a restricted-mode bypass vulnerability where function-name validation is not applied to RangeFunction nodes in FROM clauses. Attackers can execute file-reading functions like pg_read_file through FROM-clause syntax to read arbitrary files despite restricted-mode protections.