AWSVulnerabilityCloud Security
CVE-2026-85787 - An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server to modify data beyond the read-only scope
AWS Security BulletinsVendorSunday, October 25, 2026
<p><a href="https://aws.amazon.com/security/security-bulletins/2026-101-aws/">Read this article</a></p>
Why this matters
This item may affect cybersecurity planning, cloud security posture, AI governance, compliance readiness, incident response, or risk prioritization. Review the original source before making operational or legal decisions.