Vulnerability Description
Pgpool-II provided by PgPool Global Development Group contains an authentication bypass by primary weakness vulnerability. if the vulnerability is exploited, an attacker may be able to log in to the system as an arbitrary user, allowing them to read or tamper with data in the database, and/or disable the database.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://jvn.jp/en/jp/JVN06238225/
- https://www.pgpool.net/mediawiki/index.php/Main_Page#News
- https://lists.debian.org/debian-lts-announce/2025/10/msg00014.html
FAQ
What is CVE-2025-46801?
CVE-2025-46801 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Pgpool-II provided by PgPool Global Development Group contains an authentication bypass by primary weakness vulnerability. if the vulnerability is exploited, an attacker may be able to log in to the s...
How severe is CVE-2025-46801?
CVE-2025-46801 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2025-46801?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.