Postgres MCP Server SQL Injection
Date: 2025-05
Affected: Postgres MCP Server SQL Injection
Attack vector: sql-injection
Category: real-world
Severity: Medium

Postgres MCP server accepted semicolon-delimited statements. Injecting "COMMIT; DROP SCHEMA public CASCADE;" ended the read-only transaction wrapper and allowed full-privilege commands. The npm package still gets 21K weekly downloads.


Mitigations:

Architectural layers (MAESTRO):