CVE-2020-25696

score

<0.1

cvss

7.5

epss

2.7%

published

2020-11-23

kev added

—

first seen

2026-10-21

PostgreSQL psql interactive terminal versions before 13.1, 12.5, 11.10, 10.15, 9.6.20, and 9.5.24 contain a command injection caused by \\gset usage in compromised server queries, letting attackers execute arbitrary OS commands as the psql process user, exploit requires an interactive session with a compromised server.