TI-2026-58745 CVE-2026-85620 · GHSA-cm87-gp55-7cgjPostgres MCP Pro 0.3.0 Restricted-Mode Bypass via FROM-Clause FunctionPriority MEDIUM 46Postgres MCP Pro 0.3.0 contains a restricted-mode bypass vulnerability where function-name validation is not applied to RangeFunction nodes in FROM clauses.CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00506 · Published 2026-09-04 · No fix listed CWE-863