CVE-2026-85620: Crystaldba Postgres-Mcp

High severity, CVSS 8.6. EPSS: 0.5% chance of exploitation in the next 30 days.

Postgres MCP Pro 0.3.0 contains a restricted-mode bypass vulnerability where function-name validation is not applied to RangeFunction nodes in FROM clauses. Attackers can execute file-reading functions like pg_read_file through FROM-clause syntax to read arbitrary files despite restricted-mode protections.

Affected products

• Crystaldba Postgres-Mcp: up to and including 0.3.0

Published 2026-09-04. Last modified 2026-09-24.