CVE-2026-105615: PostgreSQL Anonymizer: Masked roles can read the statistics of masked columns in pg_stats

Q: Who is exposed to this issue?

Masked roles that have SELECT privilege on a table are exposed because they can read optimized statistics for masked columns through pg_stats. The disclosure is limited to values represented in histograms and most-common-value statistics.

Q: What does an attacker need to exploit it?

An attacker needs a masked role with SELECT privilege on the affected table. Exploitation also requires user interaction, according to the provided vector.

Q: How can I remediate the issue?

Upgrade PostgreSQL Anonymizer to version 3.3.0 or later.

Published Oct 28, 2026

Updated

PostgreSQL's optimized statistics on a table are visible as long as you have SELECT privilege on said table. A masked role can therefore read a limited subset of the data through the statistics view's histograms and mcvs. The vulnerability is resolved in PostgreSQL Anonymizer 3.3.0 and later versions.

Affected Software

1 affected component

PostgreSQL Anonymizer PostgreSQL Anonymizer<3.3.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade PostgreSQL Anonymizer to a version that resolves this vulnerability.
Fixed in 3.3.0

Event History

Oct 28, 2026

CVE Published

via MITRE·05:31 PM

Data Sourced

via MITRE·05:31 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this issue?

Masked roles that have SELECT privilege on a table are exposed because they can read optimized statistics for masked columns through pg_stats. The disclosure is limited to values represented in histograms and most-common-value statistics.

What does an attacker need to exploit it?