The vulnerability allows an unauthenticated attacker to access pprof profiling endpoints that are exposed on the metrics listener of postgres-exporter. This exposure permits retrieval of internal runtime details such as stack traces, memory usage, and potentially sensitive state information, leading to significant information disclosure.

All affected versions of postgres-exporter that expose the pprof endpoints on an unauthenticated metrics listener. No specific version ranges were provided, so any deployment with this default configuration is potentially impacted.

The CVSS score of 5.4 indicates moderate severity. EPSS data is not available, but the vulnerability is listed in CISA KEV as not present, suggesting it is not a highly prioritized exploit. The likely attack vector is remote, via the metrics listener port if it is reachable from the attacker’s network. Because authentication is not required to reach the pprof endpoints, an attacker can obtain sensitive information without additional credentials.