ALPINE-CVE-2026-16237: Medium severity alpine/postgresql15 vulnerability
Improper protection in PostgreSQL INSERT ... ON CONFLICT on auto-updatable views allows an attacker having INSERT and UPDATE privileges on the view to read and modify every row in the view's base table, via iterated INSERT ... ON CONFLICT DO UPDATE. This bypasses the view's WHERE condition, whether or not the view is a securitybarrier view. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/postgresql15to a version that resolves this vulnerability.Fixed in 15.20-r0 - Upgrade
Upgrade
alpine/postgresql16to a version that resolves this vulnerability.Fixed in 16.16-r0 - Upgrade
Upgrade
alpine/postgresql17to a version that resolves this vulnerability.Fixed in 17.12-r0 - Upgrade
Upgrade
alpine/postgresql18to a version that resolves this vulnerability.Fixed in 18.7-r0 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 18.7 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 17.12 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.16 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 15.20 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 14.25
Event History
Frequently Asked Questions
Who is exposed to this issue?
Instances using an affected PostgreSQL version are exposed where a user has both INSERT and UPDATE privileges on an auto-updatable view backed by a base table. The view's WHERE condition does not prevent the bypass, including when the view uses security_barrier.
What access does an attacker need?
An attacker needs authenticated privileges to INSERT and UPDATE the affected view. They can exploit the issue through iterated INSERT ... ON CONFLICT DO UPDATE statements without user interaction.
What can an attacker do through the vulnerability?
The attacker can read and modify every row in the view's base table, including rows that should be excluded by the view's WHERE condition.
Which PostgreSQL versions need remediation?
PostgreSQL versions before 18.7, 17.12, 16.16, 15.20, and 14.25 are affected. Upgrade to the applicable listed release or later.