{"id":8911,"date":"2026-11-13T21:24:59","date_gmt":"2026-11-13T21:24:59","guid":{"rendered":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection"},"modified":"2026-11-13T21:24:59","modified_gmt":"2026-11-13T21:24:59","slug":"cve-2026-125322-pgedge-postgres-mcp-server-sql-injection","status":"publish","type":"post","link":"https:\/\/i10x.ai\/news\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection","title":{"rendered":"CVE-2026-125322: pgEdge Postgres MCP Server SQL injection in count_rows where parameter"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">\u26a1 Quick Take<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>What:<\/strong> SQL injection in the <code>count_rows<\/code> tool&#8217;s <code>where<\/code> parameter allowed subqueries against unintended tables<\/li><li><strong>Who is affected:<\/strong> pgEdge Postgres MCP Server 1.0.0 and earlier, including all alpha and beta pre-releases<\/li><li><strong>What to do:<\/strong> Upgrade to version 1.1.0 or later<\/li><li><strong>Scope:<\/strong> Attackers could read any table the connected database role had SELECT privileges on, but could not write or escalate privileges<\/li><li><strong>Workaround:<\/strong> Grant the connecting role SELECT only on tables you intend to expose<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">In plain English<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The pgEdge Postgres MCP Server is a tool that lets AI assistants query PostgreSQL databases through the Model Context Protocol. A security flaw in its <code>count_rows<\/code> feature let someone ask how many rows matched a condition, but they could sneak in a hidden query about a completely different table. By checking whether the count was zero or not, an attacker could extract data from any table the database user could read, one character at a time. The flaw is fixed in version 1.1.0. If you use this tool, upgrade now. If you don&#8217;t use pgEdge Postgres MCP Server, you can ignore this.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What happened<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The <code>count_rows<\/code> tool in pgEdge Postgres MCP Server accepted a <code>where<\/code> parameter to filter rows. This parameter was inserted directly into a SQL <code>SELECT COUNT(*)<\/code> statement with no validation beyond a generic read-only check. According to the security advisory, a caller could supply a subquery in the <code>where<\/code> clause referencing a table that was never named in the tool call.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For example, calling <code>count_rows(table=&quot;orders&quot;, where=(SELECT count(*) FROM customers WHERE email = &#x27;guess&#x27;) = 1)<\/code> would return the full orders count when the guess was correct and zero when it was wrong. This let an attacker enumerate arbitrary data in a table they never named, using the returned count as a true\/false signal.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The advisory states that both boolean-blind and error-based blind injection techniques were confirmed exploitable. The flaw was reproduced directly against the tool&#8217;s handler and verified against a live PostgreSQL 16 instance.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The database privilege boundary remained intact. The advisory confirms that attempts to read tables the connected role had no grant on failed with &#8220;permission denied for table&#8221; errors, and the flaw could not write data or escalate beyond the connected role&#8217;s existing SELECT privileges. Classic stacked-query injection (e.g., <code>; DROP TABLE ...<\/code>) was already correctly rejected by existing guards.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What you should do<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Upgrade to pgEdge Postgres MCP Server version 1.1.0 or later. The fix rejects any <code>where<\/code> clause containing a bare <code>SELECT<\/code> or <code>TABLE<\/code> keyword in the comment-stripped, literal-blanked residue. According to the commit message, the fix was verified by reproducing every payload from the report against a live server before the change and confirming all were rejected afterwards.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As a defense-in-depth measure, grant the connecting database role SELECT privileges only on the tables you intend to expose through the MCP server. This limits what an attacker could reach even if a similar flaw were discovered in the future.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What it means<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This vulnerability is a reminder that AI agent tools that construct SQL queries from user input must validate those inputs carefully. Even when a tool appears to accept only a filter predicate, any string interpolation into SQL can become an injection vector if subqueries or other SQL constructs are not explicitly blocked.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The pgEdge team&#8217;s fix takes a surgical approach, rejecting subqueries while leaving legitimate simple predicates untouched. The <code>query_database<\/code> and <code>execute_explain<\/code> tools were unaffected, since running arbitrary SQL is their documented purpose.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The CVSS score of 6.5 reflects the fact that an attacker needed valid credentials (Privileges Required: Low) and could only read data the connected role already had access to (Confidentiality: High, Integrity: None, Availability: None, Scope: Unchanged).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Sources<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-125322\" target=\"_blank\" rel=\"noreferrer noopener\">NVD CVE-2026-125322<\/a><\/li><li><a href=\"https:\/\/github.com\/pgEdge\/pgedge-postgres-mcp\/security\/advisories\/GHSA-fhv3-x3jh-grj7\" target=\"_blank\" rel=\"noreferrer noopener\">GitHub Security Advisory GHSA-fhv3-x3jh-grj7<\/a><\/li><li><a href=\"https:\/\/github.com\/pgEdge\/pgedge-postgres-mcp\/issues\/200\" target=\"_blank\" rel=\"noreferrer noopener\">GitHub Issue #200<\/a><\/li><li><a href=\"https:\/\/github.com\/pgEdge\/pgedge-postgres-mcp\/pull\/201\" target=\"_blank\" rel=\"noreferrer noopener\">GitHub Pull Request #201<\/a><\/li><li><a href=\"https:\/\/github.com\/pgEdge\/pgedge-postgres-mcp\/commit\/933f1b4cb136183eb307064c1cf1ad2bf015f314\" target=\"_blank\" rel=\"noreferrer noopener\">Fix commit 933f1b4<\/a><\/li><li><a href=\"https:\/\/github.com\/pgEdge\/pgedge-postgres-mcp\/releases\/tag\/v1.1.0\" target=\"_blank\" rel=\"noreferrer noopener\">Release v1.1.0<\/a><\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>A SQL injection flaw in pgEdge Postgres MCP Server&#8217;s count_rows tool allowed callers to extract data from any table the connected database role could read, using subqueries as an inference oracle.<\/p>\n","protected":false},"author":2,"featured_media":8910,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"paper_title":"","paper_url":"","pdf_url":"","doi":"","arxiv_id":"","authors":"","institutions":"","paper_date":"","venue":"","peer_reviewed":false,"code_url":"","data_url":"","funding_coi":"","figure_license":"","paper_license":"","replication":"","study_models":"","study_sample":"","footnotes":"","_yoast_wpseo_primary_category":"65","_nx_sec_severity":"medium","_nx_sec_affected":"pgEdge Postgres MCP Server 1.0.0 and earlier, including all alpha and beta pre-releases","_nx_sec_status":"patch-available","_nx_sec_kicker":"ALERT: SQL injection in pgEdge MCP Server let attackers read any database table","_nx_sec_type":"mcp","_nx_sec_vendor":"pgEdge","_nx_sec_fixed":"1.1.0","_nx_sec_action":""},"categories":[14,65,12,28],"tags":[],"companies":[],"products":[],"class_list":["post-8911","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-agents","category-ai-security","category-policy-safety","category-security-defense"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>CVE-2026-125322: pgEdge MCP Server SQL injection fixed<\/title>\n<meta name=\"description\" content=\"CVE-2026-125322 let attackers extract data from any PostgreSQL table via subqueries in the count_rows where parameter. Fixed in pgEdge MCP Server 1.1.0.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/i10xnews.kinsta.cloud\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CVE-2026-125322: pgEdge MCP Server SQL injection fixed\" \/>\n<meta property=\"og:description\" content=\"CVE-2026-125322 let attackers extract data from any PostgreSQL table via subqueries in the count_rows where parameter. Fixed in pgEdge MCP Server 1.1.0.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/i10xnews.kinsta.cloud\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection\" \/>\n<meta property=\"og:site_name\" content=\"i10X News\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-13T21:24:59+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection-title.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1344\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Christopher Ort\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/i10x-news-og-default-1200x630-1.png\" \/>\n<meta name=\"twitter:creator\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:site\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christopher Ort\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection\"},\"author\":{\"name\":\"Christopher Ort\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\"},\"headline\":\"CVE-2026-125322: pgEdge Postgres MCP Server SQL injection in count_rows where parameter\",\"datePublished\":\"2026-11-13T21:24:59+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection\"},\"wordCount\":615,\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection-title.webp\",\"articleSection\":[\"Agents\",\"AI Security\",\"Policy &amp; Safety\",\"Security &amp; Defense\"],\"inLanguage\":\"en-US\",\"dateModified\":\"2026-11-13T21:24:59+00:00\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection\",\"name\":\"CVE-2026-125322: pgEdge MCP Server SQL injection fixed\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection-title.webp\",\"datePublished\":\"2026-11-13T21:24:59+00:00\",\"description\":\"CVE-2026-125322 let attackers extract data from any PostgreSQL table via subqueries in the count_rows where parameter. Fixed in pgEdge MCP Server 1.1.0.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection#primaryimage\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection-title.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection-title.webp\",\"width\":1344,\"height\":768,\"caption\":\"Image: AI-generated, i10X\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/i10x.ai\\\/news\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"CVE-2026-125322: pgEdge Postgres MCP Server SQL injection in count_rows where parameter\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\",\"name\":\"i10X News\",\"description\":\"Stay updated with the latest news and announcements from i10X.\",\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/i10x.ai\\\/news?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\",\"name\":\"i10X\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"contentUrl\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"width\":180,\"height\":180,\"caption\":\"i10X\"},\"image\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/i10x_ai\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/i10x-ai\",\"https:\\\/\\\/instagram.com\\\/i10x.ai\",\"https:\\\/\\\/www.youtube.com\\\/@i10X_ai_official\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\",\"name\":\"Christopher Ort\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"caption\":\"Christopher Ort\"},\"description\":\"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/author\\\/christopher-ort\",\"sameAs\":[\"https:\\\/\\\/i10x.ai\\\/blog\\\/author\\\/christopher-ort\"],\"worksFor\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"alumniOf\":{\"@type\":\"EducationalOrganization\",\"name\":\"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)\",\"url\":\"https:\\\/\\\/www.fau.eu\"},\"subjectOf\":[{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/papers.ssrn.com\\\/abstract=7426699\",\"name\":\"The Style Penalty: How AI Resume-Writing Tools Shape Outcomes in Automated Hiring Screens\"},{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/www.heise.de\\\/news\\\/KI-Chatbots-bewerten-KI-Lebenslaeufe-Claude-findet-sich-besser-als-GPT-11317531.html\",\"name\":\"KI-Chatbots bewerten KI-Lebensl\u00e4ufe: Claude findet sich besser als GPT\"},{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/t3n.de\\\/news\\\/bewerbung-schreiben-ki-5-fehler-1747190\\\/\",\"name\":\"Bewerbung mit KI schreiben: Diese 5 Fehler solltet ihr laut Studien vermeiden\"}]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CVE-2026-125322: pgEdge MCP Server SQL injection fixed","description":"CVE-2026-125322 let attackers extract data from any PostgreSQL table via subqueries in the count_rows where parameter. Fixed in pgEdge MCP Server 1.1.0.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection","og_locale":"en_US","og_type":"article","og_title":"CVE-2026-125322: pgEdge MCP Server SQL injection fixed","og_description":"CVE-2026-125322 let attackers extract data from any PostgreSQL table via subqueries in the count_rows where parameter. Fixed in pgEdge MCP Server 1.1.0.","og_url":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection","og_site_name":"i10X News","article_published_time":"2026-11-13T21:24:59+00:00","og_image":[{"width":1344,"height":768,"url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection-title.webp","type":"image\/webp"}],"author":"Christopher Ort","twitter_card":"summary_large_image","twitter_image":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/i10x-news-og-default-1200x630-1.png","twitter_creator":"@i10x_ai","twitter_site":"@i10x_ai","twitter_misc":{"Written by":"Christopher Ort","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection#article","isPartOf":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection"},"author":{"name":"Christopher Ort","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a"},"headline":"CVE-2026-125322: pgEdge Postgres MCP Server SQL injection in count_rows where parameter","datePublished":"2026-11-13T21:24:59+00:00","mainEntityOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection"},"wordCount":615,"publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection-title.webp","articleSection":["Agents","AI Security","Policy &amp; Safety","Security &amp; Defense"],"inLanguage":"en-US","dateModified":"2026-11-13T21:24:59+00:00"},{"@type":"WebPage","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection","url":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection","name":"CVE-2026-125322: pgEdge MCP Server SQL injection fixed","isPartOf":{"@id":"https:\/\/i10x.ai\/news\/#website"},"primaryImageOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection#primaryimage"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection-title.webp","datePublished":"2026-11-13T21:24:59+00:00","description":"CVE-2026-125322 let attackers extract data from any PostgreSQL table via subqueries in the count_rows where parameter. Fixed in pgEdge MCP Server 1.1.0.","breadcrumb":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/i10xnews.kinsta.cloud\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection#primaryimage","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection-title.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection-title.webp","width":1344,"height":768,"caption":"Image: AI-generated, i10X"},{"@type":"BreadcrumbList","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-125322-pgedge-postgres-mcp-server-sql-injection#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/i10x.ai\/news"},{"@type":"ListItem","position":2,"name":"CVE-2026-125322: pgEdge Postgres MCP Server SQL injection in count_rows where parameter"}]},{"@type":"WebSite","@id":"https:\/\/i10x.ai\/news\/#website","url":"https:\/\/i10x.ai\/news","name":"i10X News","description":"Stay updated with the latest news and announcements from i10X.","publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/i10x.ai\/news?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/i10x.ai\/news\/#organization","name":"i10X","url":"https:\/\/i10x.ai\/news\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/","url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","contentUrl":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","width":180,"height":180,"caption":"i10X"},"image":{"@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/i10x_ai","https:\/\/www.linkedin.com\/company\/i10x-ai","https:\/\/instagram.com\/i10x.ai","https:\/\/www.youtube.com\/@i10X_ai_official"]},{"@type":"Person","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a","name":"Christopher Ort","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","caption":"Christopher Ort"},"description":"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.","url":"https:\/\/i10x.ai\/news\/author\/christopher-ort","sameAs":["https:\/\/i10x.ai\/blog\/author\/christopher-ort"],"worksFor":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"alumniOf":{"@type":"EducationalOrganization","name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)","url":"https:\/\/www.fau.eu"},"subjectOf":[{"@type":"CreativeWork","url":"https:\/\/papers.ssrn.com\/abstract=7426699","name":"The Style Penalty: How AI Resume-Writing Tools Shape Outcomes in Automated Hiring Screens"},{"@type":"CreativeWork","url":"https:\/\/www.heise.de\/news\/KI-Chatbots-bewerten-KI-Lebenslaeufe-Claude-findet-sich-besser-als-GPT-11317531.html","name":"KI-Chatbots bewerten KI-Lebensl\u00e4ufe: Claude findet sich besser als GPT"},{"@type":"CreativeWork","url":"https:\/\/t3n.de\/news\/bewerbung-schreiben-ki-5-fehler-1747190\/","name":"Bewerbung mit KI schreiben: Diese 5 Fehler solltet ihr laut Studien vermeiden"}]}]}},"_links":{"self":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/8911","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/comments?post=8911"}],"version-history":[{"count":0,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/8911\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media\/8910"}],"wp:attachment":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media?parent=8911"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/categories?post=8911"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/tags?post=8911"},{"taxonomy":"company","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/companies?post=8911"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/products?post=8911"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}