# PostgreSQL CVE-2025-8714

_<p><strong>CVE-2025–8714</strong>, published on August 14, 2025 reports <strong>arbitrary code injection</strong> for restore-time when using <code>psql</code>. The code injection is achieved via <em>psql meta commands</em>. It affects <code>pg_dumpall</code> and <code>pg_restore</code> when used to generate a plain format dump.</p>_ - [__MysticHackers POC__](https://mystichackers.com/story/OQ)