Read the docs
TI-2025-32594 Aliases CVE-2025-52467

pgai secrets exfiltration via `pull_request_target`

Priority MEDIUM 41CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-200.

Summary

pgai is a Python library that transforms PostgreSQL into a retrieval engine for RAG and Agentic applications. Prior to commit 8eb3567, the pgai repository was vulnerable to an attack allowing the exfiltration of all secrets used in one workflow. In particular, the GITHUB_TOKEN with write permissions for the repository, allowing an attacker to tamper with all aspects of the repository, including pushing arbitrary code and releases. This issue has been patched in commit 8eb3567.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00402 34th percentileScored 2026-11-07
Fix Fixed pgai (timescale): 8eb356729c33560ce54b88b9a956960ad1e3ede8

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
timescalepgaibefore 8eb356729c33560ce54b88b9a956960ad1e3ede88eb356729c33560ce54b88b9a956960ad1e3ede8Patch availableCNA
  • pgai Vendortimescale Affected before 8eb356729c33560ce54b88b9a956960ad1e3ede8 Fixed in 8eb356729c33560ce54b88b9a956960ad1e3ede8 Patch available CNA

Remediation

  • Fix · CNA pgai (timescale) Fixed in 8eb356729c33560ce54b88b9a956960ad1e3ede8

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-52467

References

Other 3

  • TI-2023-10611 TimescaleDB has incorrect access control CVSS 3.1HIGH 8.8
  • TI-2026-23232 TimescaleDB uses untrusted search path during extension upgrade CVSS 3.1HIGH 8.8
  • TI-2022-08073 Timescale TimescaleDB 1.x and 2.x before 2.5.2 may allow privilege escalation during… CVSS 3.1HIGH 8.0
  • TI-2026-80454 Type confusion in Timescale pgvectorscale DiskANN indexes CVSS 4.0HIGH 7.7
  • TI-2026-56062 Timescale tiger-gh-mcp-server DNS Rebinding via Disabled Host Header Allow-List CVSS 4.0HIGH 7.6
  • TI-2026-56061 Timescale tiger-slack DNS Rebinding via Disabled Host Header Allow-List CVSS 4.0HIGH 7.6
See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences