REDHAT-BUG-2515307: High severity PostgreSQL postgresql vulnerability

Q: Which PostgreSQL installations are affected?

PostgreSQL versions earlier than 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.

Q: What access does an attacker need to exploit this issue?

An attacker needs a PostgreSQL role that is not a superuser but holds the REPLICATION privilege. The issue is exercised through the choice of a logical decoding plugin.

Q: What is the impact of successful exploitation?

A successful attacker can cause PostgreSQL to load any file visible to the operating system account running the server. This can execute arbitrary code with the privileges of that operating system account.

Published Aug 13, 2026

Updated

Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary code as that account. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.

Affected Software

1 affected component

PostgreSQL postgresql<18.5, <17.11, <16.15, <15.19, <14.24

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade PostgreSQL to a version that resolves this vulnerability.
Fixed in 18.5
Upgrade
Upgrade PostgreSQL to a version that resolves this vulnerability.
Fixed in 17.11
Upgrade
Upgrade PostgreSQL to a version that resolves this vulnerability.
Fixed in 16.15
Upgrade
Upgrade PostgreSQL to a version that resolves this vulnerability.
Fixed in 15.19
Upgrade
Upgrade PostgreSQL to a version that resolves this vulnerability.
Fixed in 14.24

Event History

Aug 13, 2026

Data Sourced

via Red Hat·01:27 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which PostgreSQL installations are affected?

PostgreSQL versions earlier than 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.

What access does an attacker need to exploit this issue?

An attacker needs a PostgreSQL role that is not a superuser but holds the REPLICATION privilege. The issue is exercised through the choice of a logical decoding plugin.

What is the impact of successful exploitation?

A successful attacker can cause PostgreSQL to load any file visible to the operating system account running the server. This can execute arbitrary code with the privileges of that operating system account.

REDHAT-BUG-2515307: High severity PostgreSQL postgresql vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which PostgreSQL installations are affected?

What access does an attacker need to exploit this issue?

What is the impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which PostgreSQL installations are affected?

What access does an attacker need to exploit this issue?

What is the impact of successful exploitation?