What is the CVSS score of CVE-2025-12819?

CVE-2025-12819 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Ubuntu are affected by CVE-2025-12819?

CVE-2025-12819 affects PgBouncer, a critical database connection pooling service, allowing unauthenticated attackers to execute arbitrary SQL commands during the authentication phase.. A patch is available.

How to fix or mitigate CVE-2025-12819?

Within 24 hours: Identify all systems running PgBouncer versions before 1.25.1 and document their criticality and exposure level. Within 7 days: Implement network segmentation to restrict PgBouncer access to trusted application servers only, and consider disabling the search_path parameter if operationally feasible. Within 30 days: Upgrade to PgBouncer 1.25.1 or later as soon as the patch becomes available, or migrate to an alternative connection pooling solution if upgrade timeline is uncertain.

Ubuntu CVE-2025-12819

EUVD-2025-201089 HIGH

Untrusted Search Path (CWE-426)

2025-12-03 f86ef6dc-4d3a-42ad-8f28-e6d5547a5007

Information Disclosure Ubuntu Debian Pgbouncer

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Ubuntu

MEDIUM

qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 15, 2026 - 16:14 euvd

EUVD-2025-201089

Analysis Generated

Mar 15, 2026 - 16:14 vuln.today

CVE Published

Dec 03, 2025 - 19:15 nvd

HIGH 7.5

DescriptionCVE.org

Untrusted search path in auth_query connection handler in PgBouncer before 1.25.1 allows an unauthenticated attacker to execute arbitrary SQL during authentication via a malicious search_path parameter in the StartupMessage.

Analysis

Technical ContextAI

This vulnerability is classified as Untrusted Search Path (CWE-426).

RemediationAI

Monitor vendor advisories for patches. Apply mitigations such as network segmentation, access restrictions, and monitoring.

More in Pgbouncer

View all

CVE-2015-4054 HIGH This Week POC

7.5 May 23

PgBouncer before 1.5.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by send

CVE-2021-3672 MEDIUM This Month POC

5.6 Nov 23

A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Se

CVE-2015-6817 HIGH This Week

8.1 May 23

PgBouncer 1.6.x before 1.6.1, when configured with auth_user, allows remote attackers to gain login access as auth_user

CVE-2025-2291 HIGH This Week

8.1 Apr 16

Password can be used past expiry in PgBouncer due to auth_query not taking into account Postgres its VALID UNTIL value,

CVE-2026-6665 HIGH This Week

8.1 May 09

Stack overflow in PgBouncer before 1.25.2 enables malicious PostgreSQL backend servers to trigger remote code execution

CVE-2021-3935 HIGH This Week

8.1 Nov 22

When PgBouncer is configured to use "cert" authentication, a man-in-the-middle attacker can inject arbitrary SQL queries

CVE-2026-6664 HIGH This Week

7.5 May 09

Remote denial-of-service in PgBouncer versions before 1.25.2 allows unauthenticated attackers to crash the connection po

CVE-2026-6666 MEDIUM This Month

5.9 May 09

PgBouncer before version 1.25.2 crashes when a backend PostgreSQL server sends an error response lacking an SQLSTATE fie

CVE-2012-4575 MEDIUM This Month

5.0 Nov 18

The add_database function in objects.c in the pgbouncer pooler 1.5.2 for PostgreSQL allows remote attackers to cause a d

CVE-2026-6667 MEDIUM This Month

4.3 May 09

PgBouncer before version 1.25.2 fails to properly restrict the KILL_CLIENT admin command to authorized users, allowing a

Same weakness CWE-426 – Untrusted Search Path

View all

CVE-2015-0096 CRITICAL POC

9.3

CVE-2012-1854 HIGH POC

7.8

CVE-2016-5330 HIGH POC

7.8

CVE-2019-11660 HIGH POC

7.8

CVE-2017-12414 CRITICAL POC

9.8

CVE-2025-26155 CRITICAL POC

9.8

CVE-2023-30330 CRITICAL POC

9.8

CVE-2023-26036 CRITICAL POC

9.8

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

Vendor StatusVendor

Ubuntu

Priority: Medium

pgbouncer

Release	Status	Version
xenial	needs-triage	-
bionic	needs-triage	-
focal	needs-triage	-
jammy	needs-triage	-
noble	needs-triage	-
questing	needs-triage	-
upstream	released	1.25.1-1
plucky	ignored	end of life, was needs-triage

Debian

pgbouncer

Release	Status	Fixed Version	Urgency
bullseye	fixed	1.15.0-1+deb11u2	-
bullseye (security)	fixed	1.15.0-1+deb11u2	-
bookworm	fixed	1.18.0-1+deb12u1	-
trixie	fixed	1.24.1-1+deb13u1	-
forky, sid	fixed	1.25.1-1	-
(unstable)	fixed	1.25.1-1	-

DLA-4422-1

CVE-2025-12819 vulnerability details – vuln.today

Back

Ubuntu CVE-2025-12819

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

Analysis

Technical ContextAI

RemediationAI

More in Pgbouncer

Same weakness CWE-426 – Untrusted Search Path

Same technique Information Disclosure

Vendor StatusVendor

Ubuntu

Debian

Share

External POC / Exploit Code