CVE-2025-46801: Critical severity pgpool-ii vulnerability
Pgpool-II provided by PgPool Global Development Group contains an authentication bypass by primary weakness vulnerability. if the vulnerability is exploited, an attacker may be able to log in to the system as an arbitrary user, allowing them to read or tamper with data in the database, and/or disable the database.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-46801?
CVE-2025-46801 is considered a high-severity vulnerability due to its potential for authentication bypass resulting in unauthorized access.
How do I fix CVE-2025-46801?
To fix CVE-2025-46801, upgrade to the latest version of Pgpool-II where the vulnerability has been patched.
Which systems are affected by CVE-2025-46801?
CVE-2025-46801 affects all versions of Pgpool-II provided by the PgPool Global Development Group.
What can an attacker do if they exploit CVE-2025-46801?
If exploited, an attacker could log in as any user, allowing them to read, modify, or delete data in the database.
Is there a workaround for CVE-2025-46801 if I cannot update immediately?
Currently, there are no known effective workarounds for CVE-2025-46801 other than applying the necessary updates.