EUVD-2026-38073Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Pre-authentication first-read path reached over the network with no user interaction (AV:N/AC:L/PR:N/UI:N); heap OOB write plausibly yields RCE, so C/I/A:H.
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. Versions 2.0.18 through 3.0.8 have a pre-authentication heap memory corruption vulnerability in the MySQL and PostgreSQL protocol first-read paths. A remote unauthenticated client can declare an oversized first packet length, and ProxySQL passes that attacker-controlled length directly to recv() while writing into a fixed 32 KB input queue. Version 3.0.9 patches the issue.
Articles & Coverage 2
AnalysisAI
Pre-authentication heap memory corruption in ProxySQL 2.0.18 through 3.0.8 allows remote unauthenticated attackers to corrupt heap memory by sending a crafted first packet declaring an oversized length, which is passed directly to recv() into a fixed 32 KB input queue on both MySQL and PostgreSQL protocol listeners. The flaw carries a CVSS 9.8 rating and is fixed in 3.0.9; no public exploit identified at time of analysis, but the trivial trigger condition and out-of-bounds write primitive create strong potential for weaponization.
Technical ContextAI
ProxySQL is a high-performance database proxy used in front of MySQL/MariaDB and PostgreSQL clusters for connection pooling, query routing, and failover. The vulnerability is a CWE-787 out-of-bounds write rooted in how the protocol front-ends parse the first packet header on a new client connection: a length field controlled by the client is passed directly to recv() while the destination buffer is a fixed 32 KB input queue, so any declared length larger than the buffer results in a heap write past the queue's bounds. Both the MySQL wire protocol listener and the PostgreSQL protocol listener share this defective first-read path, broadening the attack surface to any TCP port ProxySQL exposes for client traffic. The CPE cpe:2.3:a:sysown:proxysql:*:*:*:*:*:*:*:* confirms the upstream sysown/proxysql codebase is affected across the named range.
RemediationAI
Vendor-released patch: ProxySQL 3.0.9 - upgrade all affected instances to 3.0.9 or later as the primary remediation, per https://github.com/sysown/proxysql/releases/tag/v3.0.9 and the advisory at https://github.com/sysown/proxysql/security/advisories/GHSA-58ww-865x-grpr. Until the upgrade is rolled out, restrict network reachability of the ProxySQL client-facing ports (default 6033 for MySQL, plus any configured PostgreSQL listener) to known application subnets via firewall or security-group rules, since the bug triggers pre-authentication and IP allowlisting is the only effective compensating control; this trades off operational flexibility for clients connecting from new networks. Disabling the PostgreSQL listener if unused removes one of the two vulnerable code paths but does not fix the MySQL path. Front-ending ProxySQL with a TLS-terminating proxy that performs strict client certificate authentication can blunt opportunistic scanning but does not mitigate exploitation by any attacker able to complete the TCP handshake, so it is not a substitute for patching.
More in PostgreSQL
View allPostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() improperl
An issue was discovered in Appsmith before 1.52. Rated critical severity (CVSS 9.8), this vulnerability is remotely expl
Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows re
Unauthenticated arbitrary file write in Splunk Enterprise (below 10.2.4 and 10.0.7) and Splunk Cloud Platform (below 10.
PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allow
The build_tablename function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP through 5.6.7 does not validate t
A vulnerability in the h2oai/h2o-3 REST API versions 3.46.0.4 allows unauthenticated remote attackers to execute arbitra
In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_serve
Unauthenticated SQL injection in Vendure Shop API allows remote attackers to execute arbitrary SQL commands against the
Parse Server is an open source http web server backend. Rated critical severity (CVSS 10.0), this vulnerability is remot
Hard-coded default PostgreSQL credentials shipped in the docker-compose.yaml of langgenius Dify through version 1.5.1 al
A vulnerability in the FinanceChatLlamaPack of the run-llama/llama_index repository, versions up to v0.12.3, allows for
Same weakness CWE-787 – Out-of-bounds Write
View allSame technique Memory Corruption
View allShare
External POC / Exploit Code
Leaving vuln.today