CVE-2025-59468

Publication date

2026-01-08 16:18:20

Family

hackerone

State

PUBLISHED

Description

This vulnerability allows a Backup Administrator to perform remote code execution (RCE) as the postgres user by sending a malicious password parameter.