CVE-2026-107350

Name of the Vulnerable Software and Affected Versions PgBouncer versions 1.17.0 through 1.26.0

Description Improper authentication occurs during the SCRAM authentication process. A remote attacker who possesses the password of a user listed in the auth file can authenticate as any other user that utilizes SCRAM, including backend superusers and PgBouncer administrators. This is possible because a second StartupMessage sent during the authentication process against a non-existent database is not rejected, allowing the attacker to switch the identity of the user being logged in while the SCRAM exchange continues to be verified against the keys of the first user.

Recommendations Update PgBouncer to a version later than 1.26.0.