PostgreSQL Vulnerability Exploited Alongside BeyondTrust Zero-Day in Targeted Attacks
By Sigmateq Team
Published On February 16, 2025
Threat actors who were behind the exploitation of a Zero-Day vulnerability in BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) products in December 2024 likely also exploited a previously unknown SQL injection flaw in PostgreSQL, according to findings from Rapid7. The vulnerability, tracked as CVE-2025-1094 (CVSS score: 8.1), affects the PostgreSQL interactive tool psql. “An attacker who can generate a SQL injection via CVE-2025-1094 can then achieve arbitrary code execution (ACE) by leveraging the interactive tool’s ability to run meta-commands,” security researcher Stephen Fewer said. | PostgreSQL Vulnerability Exploited
