---
id: "CVE-2026-125327"
page: "https://infrastack.ai/live/CVE-2026-125327"
kind: "vulnerability"
aliases: ["CVE-2026-125327"]
title: "pgEdge RAG Server: unauthenticated query endpoint lets remote users exhaust resources"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ai-tooling", "pgedge-rag-server", "pgvector", "postgresql", "self-hosted"]
not_affected_if: ["endpoint-not-reachable-remotely", "version-2.0.0-or-later"]
published_at: "2026-11-10T19:21:09+00:00"
first_seen_at: "2026-11-10T19:25:14+00:00"
updated_at: "2026-11-10T19:43:15+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-125327", "first_seen_at": "2026-11-10T19:25:14+00:00"}]
exploit_sources: []
---

# pgEdge RAG Server: unauthenticated query endpoint lets remote users exhaust resources

Link for people: https://infrastack.ai/live/CVE-2026-125327 (this .md is for agents)

pgEdge RAG Server, a retrieval-augmented generation API over PostgreSQL and pgvector, reads the entire filtered corpus with no LIMIT and rebuilds an in-memory BM25 index on every request. Because the query endpoint is unauthenticated, has no rate limit, and hybrid search is on by default, a remote attacker can exhaust database, CPU and service resources with inexpensive queries.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the deployed pgEdge RAG Server version; versions below `2.0.0` are affected.
- Check whether the query endpoint is reachable from outside your network without credentials.
- Check whether `HybridEnabled` is still at its default in `internal/config/loader.go` or your configuration.

## Fix

- pgEdge RAG Server: upgrade to `2.0.0` or later.

## Timeline

- 2026-11-10T19:25:14+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-125327

## Documents

- [advisory] Vendor advisory: github.com https://github.com/pgEdge/pgedge-rag-server/security/advisories/GHSA-5qg5-rgp6-j5m5
- [fix] Patch: github.com https://github.com/pgEdge/pgedge-rag-server/commit/a09d4872356b510c81f11591845445c33ff45a84
- [fix] Release notes: github.com https://github.com/pgEdge/pgedge-rag-server/releases/tag/v2.0.0

## From the sources

pgEdge RAG Server is an API server for retrieval-augmented generation over PostgreSQL content using pgvector. Prior to 2.0.0, the unauthenticated query endpoint uses FetchDocuments in internal/database/search.go to read the entire filtered corpus without a LIMIT and rebuild an in-memory BM25 index on every request. Because HybridEnabled is set by default in internal/config/loader.go and the endpoint has no rate limit, inexpensive remote queries can impose database and CPU work proportional to corpus size and exhaust service resources. This issue is fixed in version 2.0.0.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_