CVE-2025-59468

Critical

Published: 08/01/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

This vulnerability allows a Backup Administrator to perform remote code execution (RCE) as the postgres user by sending a malicious password parameter.

Risk Assessment

A backup administrator can gain full control over the PostgreSQL database, potentially leading to data confidentiality and integrity breaches.

Recommendation

Restrict backup administrator privileges and implement input validation mechanisms.

Original NVD description (English source)

This vulnerability allows a Backup Administrator to perform remote code execution (RCE) as the postgres user by sending a malicious password parameter.