Advisories for Golang/Github.com/PgEdge/Control-Plane package

2026

pgEdge Control Plane generates pg_hba.conf with trust authentication for local and loopback connections

Every pg_hba.conf generated by the pgEdge Control Plane begins with a hard-coded block of trust entries covering Unix-socket and loopback connections. Any operating-system account that can reach the Postgres socket or the loopback interface on a database host can authenticate as any Postgres role, including the superuser, without presenting a credential.