TI-2025-00176 Aliases CVE-2025-0218 GHSA-j2pc-4j53-q3ww

pgAgent scheduled batch job scripts are created in a predictable temporary directory…

LOW 30CWE-340Published 2025-01-07 · Updated 2025-11-03

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

When batch jobs are executed by pgAgent, a script is created in a temporary directory and then executed. In versions of pgAgent prior to 4.2.3, an insufficiently seeded random number generator is used when generating the directory name, leading to the possibility for a local attacker to pre-create the directory and thus prevent pgAgent from executing jobs, disrupting scheduled tasks.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00175 7th percentileScored 2026-11-07

Fix Fixed pgAgent: 4.2.3

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	pgAgent	4 to before 4.2.3	4.2.3	Patch available	CNA

pgAgent Vendor— Affected 4 to before 4.2.3 Fixed in 4.2.3 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:pgadmin:pgagent::::::postgresql::*	before 4.2.3	Vulnerable	pgadmin.org

cpe:2.3:a:pgadmin:pgagent:*:*:*:*:*:postgresql:*:* Versions before 4.2.3 Vulnerable ·pgadmin.org

Remediation

Fix · CNA pgAgent Fixed in 4.2.3

Timeline

2026-10-02 Threatist record created from CVE-2025-0218
2026-10-03 Alias added: GHSA-j2pc-4j53-q3ww

References

Patch 1

https://github.com/pgadmin-org/pgagent/commit/1ecd193a2be3a3dc9e98f369495e1a792e6d508c

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences