A vulnerability, which was classified as critical, has been found in Rapid7 Metasploit Pro 5.0.0. This affects an unknown function of the file postgres.exe of the component metasploitPostgreSQL Service. This manipulation causes inclusion of functionality from untrusted control sphere.

This vulnerability is handled as CVE-2026-7373. It is possible to launch the attack on the local host. There is not any exploit available.