CVE-2026-125323

The pgEdge Control Plane (versions 0.1.0 to 0.10.1) contains a vulnerability where generated pg_hba.conf files include hard-coded trust entries for Unix-socket and loopback connections. Because PostgreSQL processes these rules from top to bottom, these entries preempt operator-defined rules. In e...

EUVD-2026-121705

pgEdge Control Plane is a distributed application for managing and orchestrating Postgres databases across multiple hosts. From 0.1.0 to 0.10.1, generated pghba.conf files began with hard-coded trust entries for Unix-socket and loopback connections. Because PostgreSQL evaluates the file from top ...