Pgpool-II provided by PgPool Global Development Group contains an authentication bypass by primary weakness vulnerability. if the vulnerability is exploited, an attacker may be able to log in to the system as an arbitrary user, allowing them to read or tamper with data in the database, and/or disable the database.

Pgpool-II provided by PgPool Global Development Group contains an authentication bypass by primary weakness vulnerability. if the vulnerability is exploited, an attacker may be able to log in to the system as an arbitrary user, allowing them to read or tamper with data in the database, and/or disable the database.

Pgpool-II provided by PgPool Global Development Group contains the following vulnerability. <ul><li>Authentication bypass by primary weakness (CWE-305) - CVE-2025-46801</li></ul> PgPool Global Development Group reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and PgPool Global Development Group coordinated under the Information Security Early Warning Partnership.

Affected: Ubuntu:16.04:LTS: pgpool2, Ubuntu:20.04:LTS: pgpool2, Ubuntu:22.04:LTS: pgpool2, Ubuntu:24.04:LTS: pgpool2, Ubuntu:25.10: pgpool2

Pgpool-II provided by PgPool Global Development Group contains an authentication bypass by primary weakness vulnerability. if the vulnerability is exploited, an attacker may be able to log in to the system as an arbitrary user, allowing them to read or tamper with data in the database, and/or disable the database.