CVE-2025-46801 - CVE House
Back to Database
Status published Critical CVE-2025-46801

Pgpool-II provided by PgPool Global Development Group contains an authentication...

Vulnerability Description

Pgpool-II provided by PgPool Global Development Group contains an authentication bypass by primary weakness vulnerability. if the vulnerability is exploited, an attacker may be able to log in to the system as an arbitrary user, allowing them to read or tamper with data in the database, and/or disable the database.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-46801

Credits & Attribution

No credits recorded in the NVD database.

References

More from PgPool Global Development Group

View All →
CVE-2024-45624
Exposure of sensitive information due to incompatible policies issue exists...
Unknown 0
CVE-2023-22332
Information disclosure vulnerability exists in Pgpool-II 4.4.0 to 4.4.1 (4.4...
Unknown 0
CVE-2018-16203
PgpoolAdmin 4.0 and earlier allows remote attackers to bypass the...
Critical 9.8

Affected Vendor

PgPool Global Development Group

View all reports →

Affected Software

Pgpool-II
Vulnerable Versions:
4.6.0, 4.5.0 to 4.5.6, 4.4.0 to 4.4.11, 4.3.0 to 4.3.14, 4.2.0 to 4.2.21, All versions of 4.1 series, All versions of 4.0 series

Timeline

Official Publish: May 19th, 2025
Last Modified: November 3rd, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-305

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.