CVE-2026-119922: Babelfish for PostgreSQL Privilege Escalation

Published Nov 3, 2026

Updated

Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 may allow remote authenticated users to elevate their privileges. To remediate this issue, we recommend you upgrade to Babelfish for PostgreSQL extension versions 4.10, 5.6, 6.1 or later.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Babelfish for PostgreSQL extension to a version that resolves this vulnerability.
Fixed in 4.10
Upgrade
Upgrade Babelfish for PostgreSQL extension to a version that resolves this vulnerability.
Fixed in 5.6
Upgrade
Upgrade Babelfish for PostgreSQL extension to a version that resolves this vulnerability.
Fixed in 6.1

Event History

Nov 3, 2026

CVE Published

via MITRE·06:08 PM

Data Sourced

via MITRE·06:08 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

A remote user who is already authenticated to Babelfish for PostgreSQL may be able to elevate privileges. The provided information does not identify any requirement for user interaction or additional access beyond authenticated remote access.

Which Babelfish extension versions are affected?

Affected versions are 1.2 through 1.5, 2.1 through 2.15, 3.1 through 3.12, 4.0 through 4.8, and 5.1 through 5.4.

What versions remediate the issue?

Upgrade the Babelfish for PostgreSQL extension to version 4.10, 5.6, 6.1, or a later version.

CVE-2026-119922: Babelfish for PostgreSQL Privilege Escalation

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

Which Babelfish extension versions are affected?

What versions remediate the issue?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which Babelfish extension versions are affected?

What versions remediate the issue?