PostgreSQL Flaw CVE-2025-1094 Joins BeyondTrust Zero-Day in Stealthy Attacks

A high-severity SQL injection vulnerability, CVE-2025-1094, has been discovered in PostgreSQL’s interactive tool, psql. This flaw allows attackers to execute arbitrary SQL commands, which can escalate to arbitrary code execution (ACE) by exploiting psql’s ability to run meta-commands. CVE-2025-1094 has played a crucial role in achieving remote code execution (RCE) in every tested scenario when chained with CVE-2024-12356, a recently patched vulnerability in BeyondTrust software. Additionally, CVE-2024-12356 and CVE-2024-12686 have been actively exploited by the Silk Typhoon threat group, which conducted reconnaissance and data theft operations.