CVE-2026-107350: PgBouncer, заобикаляне на вход и права

Описание

Оригинално описание

Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the password of a user listed in auth_file to log in as any other user that authenticates using SCRAM, including PgBouncer admin users and backend superusers. A second StartupMessage sent during SCRAM authentication against a non-existent database is not rejected and switches the user being logged in as, while the SCRAM exchange is still verified against the keys of the first user.

Засегнати продукти

• n/a PgBouncer: 1.17.0 преди 1.26.1

Вид слабост

• CWE-287 Неправилна автентикация

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-107350
• https://nvd.nist.gov/vuln/detail/CVE-2026-107350
• https://www.pgbouncer.org/changelog.html