diff --git a/flow/connectors/postgres/validate.go b/flow/connectors/postgres/validate.go
index 4928e7c6d5..198f2ae0a0 100644
--- a/flow/connectors/postgres/validate.go
+++ b/flow/connectors/postgres/validate.go
@@ -67,7 +67,8 @@ func (c *PostgresConnector) CheckReplicationPermissions(ctx context.Context, use
 	}
 
 	var replicationRes bool
-	err := c.conn.QueryRow(ctx, "SELECT rolreplication FROM pg_roles WHERE rolname = $1", username).Scan(&replicationRes)
+	err := c.conn.QueryRow(ctx, "SELECT rolreplication FROM pg_roles WHERE rolname = "+
+		QuoteLiteral(username)).Scan(&replicationRes)
 	if err != nil {
 		return err
 	}