CVE-2025-59470

A Backup Operator can run malicious code on the server as the postgres user by sending specially crafted interval or order parameters. This is critical because it gives an internal user the ability to take complete control of the database system.

CWE-77 (Improper Neutralization of Special Elements used in a Command) allows a Backup Operator to achieve RCE as the postgres user via malicious interval or order parameters. The attack requires valid Backup Operator credentials but results in full system compromise under the database process context.