Vulnerabilities CVE-2026-16238

CVE-2026-16238

High

Open

TLP:CLEAR

PostgreSQL type confusion in pg_restore_attribute_stats() executes arbitrary code

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Type confusion in PostgreSQL pg_restore_attribute_stats() allows an object creator to execute arbitrary code as the operating system user running the database, via conflation of range and multirange values. Within major version 18, minor versions before PostgreSQL 18.5 are affected. Versions before PostgreSQL 18 are unaffected.

Details

CVSS Score: 8.8
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Confidence: 90%
Published: Aug 13, 2026
Last Modified: Aug 13, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.