ALPINE-CVE-2026-120145: High severity alpine/postgresql15 vulnerability
Missing authorization in PostgreSQL logical replication allows a compromised publisher to execute arbitrary code as the operating system user running the superuser-owned subscription, via naming a system catalog as a replication target. Only subscriptions owned by a superuser are vulnerable. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/postgresql15to a version that resolves this vulnerability.Fixed in 15.20-r0 - Upgrade
Upgrade
alpine/postgresql16to a version that resolves this vulnerability.Fixed in 16.16-r0 - Upgrade
Upgrade
alpine/postgresql17to a version that resolves this vulnerability.Fixed in 17.12-r0 - Upgrade
Upgrade
alpine/postgresql18to a version that resolves this vulnerability.Fixed in 18.7-r0 - Upgrade
Upgrade
PostgreSQLto a version that resolves this vulnerability.Fixed in 18.7 - Upgrade
Upgrade
PostgreSQLto a version that resolves this vulnerability.Fixed in 17.12 - Upgrade
Upgrade
PostgreSQLto a version that resolves this vulnerability.Fixed in 16.16 - Upgrade
Upgrade
PostgreSQLto a version that resolves this vulnerability.Fixed in 15.20 - Upgrade
Upgrade
PostgreSQLto a version that resolves this vulnerability.Fixed in 14.25
Event History
Frequently Asked Questions
Which deployments are vulnerable?
Only PostgreSQL logical replication subscriptions owned by a superuser are vulnerable. Affected versions are PostgreSQL 14 before 14.25, 15 before 15.20, 16 before 16.16, 17 before 17.12, and 18 before 18.7.
What must an attacker control to exploit this issue?
The attacker must have compromised the logical-replication publisher. Exploitation also requires a vulnerable subscription owned by a superuser and user interaction, as reflected by the UI:R vector.
What is the impact of successful exploitation?
A compromised publisher can use a system catalog as a replication target to execute arbitrary code as the operating-system user running the superuser-owned subscription. This can affect confidentiality, integrity, and availability.