Security Advisory
CVE-2025-12819
7.5
HIGH
Vulnerability Description
Untrusted search path in auth_query connection handler in PgBouncer before 1.25.1 allows an unauthenticated attacker to execute arbitrary SQL during authentication via a malicious search_path parameter in the StartupMessage.
Published Date
December 3, 2025
Official Source
NIST NVD Advisory