Pgpool-II contains an authentication bypass vulnerability that allows an attacker to log in as any user without proper credentials. Successful exploitation can lead to unauthorized access to the database, enabling reading, tampering, or disabling of data. The vulnerability is critical with a CVSS score of 9.8.