CVE-2026-125326: pgEdge RAG Server discloses part of the configured provider credential through API error messagespgEdge RAG Server discloses part of the configured provider credential through API error messages
pgEdge RAG Server is an API server for retrieval-augmented generation over PostgreSQL content using pgvector. Prior to 2.0.0, the unauthenticated query API in internal/server/handlers.go returns err.Error() from failed LLM provider calls, preserving provider-controlled error text that can quote a partially masked submitted API key. A remote caller can cause an authentication failure and obtain part of the operator's credential for the third-party provider account through the query API error response. This issue is fixed in version 2.0.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
pgEdge RAG Serverto a version that resolves this vulnerability.Fixed in 2.0.0
Event History
Frequently Asked Questions
Which deployments are exposed?
pgEdge RAG Server deployments running versions prior to 2.0.0 are affected if their unauthenticated query API is reachable.
What does an attacker need to exploit this issue?
A remote caller does not need authentication. They need to send requests that cause an LLM provider authentication failure through the query API.
What information can be disclosed?
The error response can expose part of the configured third-party LLM provider credential, including a partially masked submitted API key. The issue does not state that the complete credential is disclosed.
What should be done to remediate the issue?
Upgrade pgEdge RAG Server to version 2.0.0, which fixes the error-message disclosure.