CVE-2026-14673: PostgreSQL amcheck does not clear untrusted search path
Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE privilege to execute arbitrary functions as the owners of expression indexes that depend on the search path, via setting a hostile search path before calling the amcheck function. Within major versions 18, 16, 15, and 14, minor versions before PostgreSQL 18.5, 16.15, 15.19, and 14.24 are affected. PostgreSQL 17 is unaffected.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
PostgreSQLto a version that resolves this vulnerability.Fixed in 18.5 - Upgrade
Upgrade
PostgreSQLto a version that resolves this vulnerability.Fixed in 16.15 - Upgrade
Upgrade
PostgreSQLto a version that resolves this vulnerability.Fixed in 15.19 - Upgrade
Upgrade
PostgreSQLto a version that resolves this vulnerability.Fixed in 14.24
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14673?
CVE-2026-14673 has a low severity rating of 3.8.
How do I fix CVE-2026-14673?
To mitigate CVE-2026-14673, ensure that only trusted users have EXECUTE privilege on the amcheck function and consider restricting the search path.
What does CVE-2026-14673 affect?
CVE-2026-14673 affects the PostgreSQL amcheck extension, specifically related to its handling of untrusted search paths.
What type of vulnerability is CVE-2026-14673?
CVE-2026-14673 is a privilege escalation vulnerability allowing potentially arbitrary function execution.
When was CVE-2026-14673 published?
CVE-2026-14673 was published on August 13, 2026.