Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-1094

85
FAUCET Score

CVE-2025-1094 is a critical SQL injection vulnerability in PostgreSQL's libpq functions and command-line utilities, affecting versions prior to 17.3, 16.7, 15.11, 14.16, and 13.19. This flaw, rated 8.1 HIGH on the CVSS scale, allows unauthenticated attackers to achieve high impact on confidentiality, integrity, and availability with high complexity. While not directly affecting PostgreSQL itself in all scenarios, it can be exploited when applications use the function results to construct input for psql, or in specific client/server encoding combinations. Notably, this vulnerability has been actively exploited as a zero-day in the wild, specifically linked to attacks against BeyondTrust Privileged Remote Access and Remote Support software, with public exploit modules available and significant community discussion.

Impacted Technologies

VendorProductVersion(s)CPE
N/APostgreSQL
>= 0, < 13.19, >= 14, < 14.16, >= 15, < 15.11, >= 16, < 16.7, >= 17, < 17.3CNA affecteddefault unaffected

CVSS Data

CVSS version used by this source: 3.1

8.1HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
2.2
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
90.03%
Probability of exploitation in next 30 days
EPSS Percentile
99.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
Metasploit: BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) unauthenticated Remote Code Execution · Dec 16, 2024
This CVE's current EPSS score of 0.9003 is in the 100th percentile among its peer group of 8,918 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (62)

3cxpatch availablevia llm_extracted
Fixed in: 9.4.2
3cxpatch availablevia llm_extracted
Fixed in: 9.4.2, 9.3.4, 9.2.6, 9.1.9
beckhoffpatch availablevia llm_extracted
Fixed in: 17.3, 16.7, 15.11, 14.16
View patch
dhis2patch availablevia llm_extracted
Fixed in: 17.3, 16.7, 15.11, 14.16
View patch
fortinetpatch availablevia llm_extracted
Fixed in: 17.3, 16.7, 15.11, 14.16
View patch
microsoftpatch availablevia msrc
Product: 17174-17086Fixed in: 14.16-1
microsoftpatch availablevia msrc
Product: cbl2 postgresql 14.14-1 on CBL Mariner 2.0Fixed in: 14.16-1
microsoftpatch availablevia msrc
Product: cbl2 postgresql 14.16-1 on CBL Mariner 2.0Fixed in: 14.16-1
microsoftpatch availablevia msrc
Product: azl3 postgresql 16.5-2 on Azure Linux 3.0Fixed in: 16.7-1
microsoftpatch availablevia msrc
Product: azl3 postgresql 16.7-1 on Azure Linux 3.0Fixed in: 16.7-1
microsoftpatch availablevia msrc
Product: 20304-17084Fixed in: 16.7-1
microsoftpatch availablevia msrc
Product: 19262-17084Fixed in: 16.7-1
microsoftpatch availablevia msrc
Product: 19261-16823Fixed in: 14.16-1
microsoftpatch availablevia msrc
Product: 20306-17086Fixed in: 14.16-1
miniopatch availablevia llm_extracted
Fixed in: 17.3, 16.7, 15.11, 14.16
View patch
navidromepatch availablevia llm_extracted
Fixed in: 17.3, 16.7, 15.11, 14.16
View patch
netscoutpatch availablevia llm_extracted
Fixed in: 17.3, 16.7, 15.11, 14.16
View patch
new_relicpatch availablevia llm_extracted
Fixed in: 17.3, 16.7, 15.11, 14.16
View patch
nvidiapatch availablevia llm_extracted
Fixed in: 17.3, 16.7, 15.11, 14.16
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportFixed in: postgresql:12-8060020250318121325.ad008a3a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceFixed in: postgresql:13-8060020250218173011.ad008a3a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceFixed in: libpq-0:13.20-1.el8_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceFixed in: postgresql:12-8060020250318121325.ad008a3a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsFixed in: postgresql:13-8060020250218173011.ad008a3a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsFixed in: libpq-0:13.20-1.el8_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsFixed in: postgresql:12-8060020250318121325.ad008a3a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Extended Update SupportFixed in: postgresql:15-8080020250218151741.63b34585
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Extended Update SupportFixed in: postgresql:13-8080020250218141334.63b34585
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Extended Update SupportFixed in: libpq-0:13.20-1.el8_8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Extended Update SupportFixed in: postgresql:12-8080020250318115906.63b34585
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: libpq-0:13.20-1.el9_5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: postgresql:15-9050020250218090615.rhel9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: postgresql-0:13.20-1.el9_5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: postgresql:16-9050020250218075302.rhel9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsFixed in: libpq-0:13.20-1.el9_0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsFixed in: postgresql-0:13.20-1.el9_0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: postgresql:15-9020020250218153429.rhel9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: postgresql-0:13.20-1.el9_2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7 Extended Lifecycle SupportFixed in: postgresql-0:9.2.24-9.el7_9.3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: postgresql-0:13.20-1.el9_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: postgresql:15-9040020250218181918.rhel9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: postgresql:16-9040020250218200209.rhel9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: libpq-0:13.20-1.el9_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: libpq-0:13.20-1.el9_2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: postgresql:13-8100020250219110026.489197e6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: libpq-0:13.20-1.el8_10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: postgresql:15-8100020250218154242.489197e6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: postgresql:16-8100020250218110357.489197e6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: postgresql:12-8100020250319175311.489197e6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.2 Advanced Update SupportFixed in: libpq-0:12.7-1.el8_2.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.2 Advanced Update SupportFixed in: postgresql:12-8020020250318123402.4cda2c84
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: postgresql:13-8040020250218192842.522a0ee4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: libpq-0:13.20-1.el8_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: postgresql:12-8040020250318163425.522a0ee4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceFixed in: postgresql:13-8040020250218192842.522a0ee4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceFixed in: libpq-0:13.20-1.el8_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceFixed in: postgresql:12-8040020250318163425.522a0ee4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsFixed in: postgresql:13-8040020250218192842.522a0ee4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsFixed in: libpq-0:13.20-1.el8_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsFixed in: postgresql:12-8040020250318163425.522a0ee4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportFixed in: postgresql:13-8060020250218173011.ad008a3a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportFixed in: libpq-0:13.20-1.el8_6
View patch

Vendor Advisories (12)

3cxllm-3cx-c3a15eadabccae7dCRITICAL

Third-Party Package Updates in Splunk Enterprise - June 2025

Jun 2, 2025
3cxllm-3cx-2d792dcff1f0eb56CRITICAL

Third-Party Package Updates in Splunk Universal Forwarder - June 2025

Jun 2, 2025
redhatCVE-2025-1094Important

postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

Feb 13, 2025
microsoft2025-Feb/CVE-2025-1094Important

PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

Feb 11, 2025
fortinetllm-fortinet-c9cf4589cb246f65HIGH

PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

Jan 1, 2025
netscoutllm-netscout-10cf3d3c4298eb47HIGH

PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

beckhoffllm-beckhoff-a7c58d1e885cd114HIGH

PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

new_relicllm-new_relic-84315a3d1c6a4a0bHIGH

PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

dhis2llm-dhis2-2bea630f90f38599HIGH

PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

miniollm-minio-63cc7ef363539054HIGH

PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

navidromellm-navidrome-5644506bd200d3b9HIGH

PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

nvidiallm-nvidia-a3c474dd7df2a80fHIGH

PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

References

lists.debian.org / debian-lts-announce/2025/02/msg00015.html
lists.debian.org / debian-lts-announce/2025/02/msg00024.html
security.netapp.com / advisory/ntap-20250221-0010
openwall.com / lists/oss-security/2025/02/16/3
openwall.com / lists/oss-security/2025/02/20/1
postgresql.org / support/security/CVE-2025-1094