← CVE Intelligence

CVE-2025-12819

Untrusted search path in auth_query connection in PgBouncer PUBLISHED

Description (CNA)

Untrusted search path in auth_query connection handler in PgBouncer before 1.25.1 allows an unauthenticated attacker to execute arbitrary SQL during authentication via a malicious search_path parameter in the StartupMessage.

Affected (CNA)

Vendor / productVersions
n/a / PgBounceraffected 0 before 1.25.1

CWE

CWE-426

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.