## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-PINKARMOR-CVE-2025-1094-LAB-SETUP
# 🛠️ CVE-2025-1094 Lab Setup
> ⚠️ **Disclaimer**
> This lab is for **educational and research purposes only**.
> Do **NOT** use any of the information or techniques demonstrated here on systems you do not own or have explicit permission to test. Unauthorized use of these methods **may violate laws** and result in severe penalties.
* * *
## 📌 Overview
**CVE-2025-1094** is a critical vulnerability affecting **PostgreSQL** ’s interactive tool **`psql`** , discovered in version **14.15** and earlier.
It allows attackers to perform **SQL Injection** which can lead to **Remote Code Execution (RCE)** under certain conditions.
* * *
## 🧨 Root Cause
The vulnerability arises from **improper handling of malformed UTF-8 input** in `psql`.
Due to insufficient validation, attackers can inject arbitrary SQL or meta-commands like `!` (shell escape), and even exploit `COPY ... TO PROGRAM` to run system commands.