{"type":"bundle","id":"bundle--9146e984-c938-5379-9974-acdce5375946","objects":[{"type":"campaign","spec_version":"2.1","id":"campaign--83d8de2c-8c34-5a94-9fa4-4a59ec00a4c5","created":"2026-09-20T19:03:30.796Z","modified":"2026-09-20T19:03:30.796Z","name":"AWS postgres MCP read-only denylist missed set_config()","description":"AWS Labs postgres MCP read-only SQL denylist missed set_config(). Upgrade to the patched release.","aliases":["CVE-2026-85787"],"first_seen":"2026-09-04T00:00:00.000Z","last_seen":"2026-09-04T12:00:00.000Z","objective":"Defensive public threat-intelligence record; see limitations and source references.","external_references":[{"source_name":"NVD CVE-2026-85787","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85787"},{"source_name":"HOL Guard operator write-up","url":"https://hol.org/blog/cve-2026-85787-awslabs-postgres-mcp-sql-denylist-bypass"},{"source_name":"CVE Record CVE-2026-85787","url":"https://www.cve.org/CVERecord?id=CVE-2026-85787"}]}]}