https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T07:39:34.288053+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-252803 EUVD-2026-252803 2026-10-18T07:39:34.290425+00:00 EUVD-2026-252803 https://cve.radiocsirt.org/vuln/fkie_cve-2025-59333 fkie_cve-2025-59333 2026-10-18T07:39:34.290456+00:00

The mcp-database-server (MCP Server) 1.1.0 and earlier, as distributed via the npm package @executeautomation/database-server, fails to implement adequate security controls to properly enforce a "read-only" mode. This vulnerability affects only the npm distribution; other distributions are not impacted. As a result, the server is susceptible to abuse and attacks on affected database systems such as PostgreSQL, and potentially others that expose elevated functionalities. These attacks may lead to denial of service and other unexpected behaviors.

 https://cve.radiocsirt.org/vuln/ghsa-65hm-pwj5-73pw GHSA-65hm-pwj5-73pw — @executeautomation/database-server does not properly restrict access, bypassing a "read-only" mode 2026-10-18T07:39:34.290489+00:00

Affected: npm: @executeautomation/database-server

The MCP Server provided by ExecuteAutomation at https://github.com/executeautomation/mcp-database-server provides an MCP interface for agentic workflows to interact with different kinds of database servers such as PostgreSQL database. However, the `mcp-database-server` MCP Server distributed via the npm package `@executeautomation/database-server` fails to implement proper security control that properly enforce a "read-only" mode and as such it is vulnerable to abuse and attacks on the affected database servers such as PostgreSQL (and potentially other db servers that expose elevated functionalities) and which may result in denial of service and other unexpected behavior.

This MCP Server is also publicly published in the npm registry: https://www.npmjs.com/package/@executeautomation/database-server

## Vulnerable code

The vulnerable code to SQL injection takes shape in several ways: - `startsWith("SELECT")` can include multiple queries because the pg driver for the `client.query()` supports multi queries if terminated with a `;` - `startsWith("SELECT")` can include denial of service queries for stored procedures and other internal db functions

The tool call [here in index.ts](https://github.com/executeautomation/mcp-database-server/blob/d6afa4be08eb05343195635fa9462746a6be3a59/index.ts#L272C1-L291C6) is vulnerable:

``` // Handle tool calls server.setRequestHandler(CallToolRequestSchema, async (request) => { switch (request.params.name) { case "read_query": {…