pgai vulnerabilities

1 known vulnerability in pgai from Timescale. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  pgai: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2025-52467Jun 19, 2025Timescale

  pgai is a Python library that transforms PostgreSQL into a retrieval engine for RAG and Agentic applications. Prior to commit 8eb3567, the pgai repository was vulnerable to an attack allowing the exfiltration of all secrets used in one workflow. In particular,