PT-2025-4138 · Unknown · Postgresql

Lucasg2G · Published 2025-01-20 · Updated 2025-09-25 · CVE-2025-10979

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 17.1

Description A high severity flaw allows unprivileged users to alter sensitive environment variables, such as PATH, potentially leading to code execution.

Recommendations For versions prior to 17.1, update to the latest version to resolve the issue.

Exploit

Fix

Improper Authorization

Incorrect Privilege Assignment

Weakness Enumeration

CWE-285

CWE-266

Related Identifiers

CVE-2025-10979

Affected Products

Postgresql

References · 10

• 🔥 https://cnblogs.com/aibot/p/19063353 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-10979 · Security Note
• https://osv.dev/vulnerability/CVE-2025-10979 · Vendor Advisory
• https://vuldb.com/?id.325850 · Note
• https://t.me/CVEtracker/33385 · Telegram Post
• https://twitter.com/CVEnew/status/1971356159362621565 · Twitter Post
• https://twitter.com/Hossted_OSS/status/1881233061200990428 · Twitter Post
• https://vuldb.com/?ctiid.325850 · Note
• https://t.me/cveNotify/136466 · Telegram Post
• https://vuldb.com/?submit.653337 · Note