early signals AWS security bulletins infra

CVE-2026-85787 - An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server to modify data beyond the read-only scope

// summary

CVE-2026-85787 affects Amazon's PostgreSQL MCP server, allowing disallowed SQL inputs to modify data beyond read-only limits.

// from the source

Read this article
Read at aws.amazon.com ↗ More from AWS security bulletins

# more from AWS security bulletins

  1. AWS security bulletins

    CVE-2026-115845 - Incomplete validation in the run_script Python sandbox in AWS MCP Server

    aws.amazon.com
  2. AWS security bulletins

    CVE-2026-115812 and CVE-2026-115813: Issue in Amazon Web Services Multi Model Server

    aws.amazon.com
  3. AWS security bulletins infra

    CVE-2026-87912 and CVE-2026-87913: Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops and MCP Server

    aws.amazon.com
  4. AWS security bulletins

    CVE-2026-87911

    aws.amazon.com
  5. AWS security bulletins infra

    CVE-2026-85788 - Issue with awslabs mysql-mcp-server

    aws.amazon.com