Listen to this Post
How the CVE Works
The Bitnami `pgpool` Docker image and `postgres-ha` Helm chart default configurations include a user `repmgr` with unauthenticated database access. The `PGPOOL_SR_CHECK_USER` is intended for internal replication checks but is misconfigured to allow trust-level authentication. Attackers can exploit this by logging in as `repmgr` without credentials. If PgPool is externally exposed, this flaw grants unauthorized database access, compromising cluster security.
DailyCVE Form
Platform: Bitnami PgPool/Postgres-HA
Version: Default configs
Vulnerability: Auth bypass
Severity: Critical
Date: 07/18/2025
Prediction: Patch by 08/2025
What Undercode Say
Check for exposed PgPool services nmap -p 5432,9999 <target_IP> Exploit attempt (example) psql -U repmgr -h <target_IP> -d postgres
How Exploit
- Attacker connects to exposed PgPool/Postgres-HA.
- Uses `repmgr` user without credentials.
- Gains full database access.
Protection from this CVE
- Disable `trust` auth for
repmgr. - Restrict PgPool network exposure.
- Update to patched versions post-release.
Impact
- Unauthorized data access/modification.
- Full cluster compromise.
- Potential lateral movement.
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
