Hoch 7.8Software
CVE-2026-125323
pgEdge Control Plane generates pg_hba.conf with trust authentication for local and loopback connections
github.com/pgEdge/control-plane
### Summary Every `pg_hba.conf` generated by the pgEdge Control Plane begins with a hard-coded block of `trust` entries covering Unix-socket and loopback connections. Any operating-system account that can reach the Postgres socket or the loopback interface on a database host can authenticate as any Postgres role, including the superuser, without presenting a credential. ### Details The generated file opens with the following six entries: ``` local all all trust host all all…
10. Nov 2026
Original bei NVD öffnen