Security fixes in pgbouncer 1.25.1-r0 (CVE-2026-6664)
Affects pgbouncerSource GCVE Database
Not known to be exploited · CVSS 7.5 High · fixed in 1.25.1-r0 : patch pgbouncer soon.
Data as of 10/25/2026, 04:40:13 UTC
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.7% chance of exploitation in 30 days – higher than 53% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 1.25.1-r0
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| CleanStartpgbouncer | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should upgrade to pgbouncer version 1.25.1-r0 to apply the security fixes for CVE-2026-6664 and the related vulnerabilities. Since a patch is available, applying this update is the recommended remediation.
Description
Multiple security vulnerabilities were addressed in the pgbouncer package with the release of version 1.25.1-r0. This update fixes four distinct vulnerabilities, including CVE-2026-6664. No specific technical details or impact descriptions are provided for these vulnerabilities. The patch is available and included in version 1.25.1-r0.
Impact
The exact impact of CVE-2026-6664 and the other three vulnerabilities fixed in pgbouncer 1.25.1-r0 is not detailed in the provided information. Without specific details, the potential risks or consequences of exploitation cannot be assessed from the available data.