Percona · Percona Pmm Server · CVE-2025-26701
Name of the Vulnerable Software and Affected Versions:
Percona PMM Server (OVA) versions prior to 3.0.0-1.ova
Description:
An issue was discovered in Percona PMM Server (OVA) where the default service account credentials can lead to SSH access, use of Sudo to root, and sensitive data exposure.
Recommendations:
For versions prior to 3.0.0-1.ova, update to PMM2 version 2.42.0-1.ova or later, such as 2.43.0-1.ova, 2.43.1-1.ova, 2.43.2-1.ova, or 2.44.0-1.ova, or update to PMM3 version 3.0.0-1.ova or later to resolve the issue.