{"id":31287,"date":"2025-02-25T03:17:52","date_gmt":"2025-02-25T03:17:52","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=31287"},"modified":"2026-04-17T18:07:36","modified_gmt":"2026-04-17T18:07:36","slug":"postgresql-sql-injection-vulnerability-cve-2025-1094","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/postgresql-sql-injection-vulnerability-cve-2025-1094\/","title":{"rendered":"PostgreSQL SQL Injection Vulnerability (CVE-2025-1094)"},"content":{"rendered":"\n

Overview<\/h2>\n\n\n\n

Recently, NSFOCUS CERT detected that PostgreSQL has issued a security announcement and fixed the PostgreSQL SQL injection vulnerability (CVE-2025-1094), with a CVSS score of 8.1. Since the psql tool of PostgreSQL is used to detect invalid UTF-8 characters (such as hax\\xC0′; \\! id #), resulting in accidental segmentation of SQL statements, and unauthenticated attackers can execute arbitrary code using the PostgreSQL interactive terminal psql by constructing specially-crafted inputs to implement SQL injection. At present, the details of vulnerabilities and PoC have been disclosed and are found to be in use. Relevant users shall take measures for protection as soon as possible.<\/p>\n\n\n\n

PostgreSQL is a powerful, flexible and customizable open-source relational database management system (RDBMS), which supports Windows, Linux, UNIX, Mac OS X, BSD and other operating systems.<\/p>\n\n\n\n

Reference link: https:\/\/www.postgresql.org\/support\/security\/CVE-2025-1094<\/a><\/p>\n\n\n\n

Scope of Impact<\/h2>\n\n\n\n

Affected version<\/strong><\/strong><\/p>\n\n\n\n