Skip to content
OpenAdvisories
High · 7.5 CVE-2026-125327 EUVD-2026-121709GHSA-5qg5-rgp6-j5m5

pgEdge RAG Server unbounded corpus read allows resource exhaustion from unauthenticated requests

Published Nov 10, 2026 · Updated Nov 12, 2026 · Assigned by GitHub_M

Description

pgEdge RAG Server is an API server for retrieval-augmented generation over PostgreSQL content using pgvector. Prior to 2.0.0, the unauthenticated query endpoint uses FetchDocuments in internal/database/search.go to read the entire filtered corpus without a LIMIT and rebuild an in-memory BM25 index on every request. Because HybridEnabled is set by default in internal/config/loader.go and the endpoint has no rate limit, inexpensive remote queries can impose database and CPU work proportional to corpus size and exhaust service resources. This issue is fixed in version 2.0.0.

Affected products

VendorProductAffectedFixed
pgEdge pgedge-rag-server < 2.0.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/pgEdge/pgedge-rag-server < 1.0.1-0.20260729020411-a09d4872356b 1.0.1-0.20260729020411-a09d4872356b GHSA-5qg5-rgp6-j5m5

References