CVE-2025-12819 — Untrusted Search Path in Pgbouncer

CWE-426 — Untrusted Search Path6 documents6 sources
Severity
8.1HIGHNVD
CNA7.5
EPSS
0.2%
top 59.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Pgbouncer
Timeline
PublishedDec 3
Latest updateDec 9

Description

Untrusted search path in auth_query connection handler in PgBouncer before 1.25.1 allows an unauthenticated attacker to execute arbitrary SQL during authentication via a malicious search_path parameter in the StartupMessage.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 2.2 | Impact: 5.9

Affected Packages3 packages

▶CVEListV5pgbouncer/pgbouncer< 1.25.1
▶NVDpgbouncer/pgbouncer< 1.25.1
▶Debianpgbouncer/pgbouncer< 1.15.0-1+deb11u2+3

🔴Vulnerability Details

3
CVEList
Untrusted search path in auth_query connection in PgBouncer↗2025-12-03
▶
GHSA
GHSA-qpxx-2fwx-f5qj: Untrusted search path in auth_query connection handler in PgBouncer before 1↗2025-12-03
▶
OSV
CVE-2025-12819: Untrusted search path in auth_query connection handler in PgBouncer before 1↗2025-12-03
▶

📋Vendor Advisories

2
Microsoft
Untrusted search path in auth_query connection in PgBouncer↗2025-12-09
▶
Debian
CVE-2025-12819: pgbouncer - Untrusted search path in auth_query connection handler in PgBouncer before 1.25....↗2025
▶