REDHAT-BUG-2515319: High severity PostgreSQL postgresql vulnerability

Q: Which PostgreSQL deployments are affected?

Only PostgreSQL 18 releases before 18.5 are affected. PostgreSQL versions before 18 are unaffected.

Q: What level of access does an attacker need?

An attacker must be able to create an object that triggers the type confusion in pg_restore_attribute_stats(). Successful exploitation can execute arbitrary code as the operating system user running the database.

Q: What is the practical impact of successful exploitation?

The attacker can execute arbitrary code with the privileges of the operating system account used by the PostgreSQL database process.

Published Aug 13, 2026

Updated

Type confusion in PostgreSQL pgrestoreattributestats() allows an object creator to execute arbitrary code as the operating system user running the database, via conflation of range and multirange values. Within major version 18, minor versions before PostgreSQL 18.5 are affected. Versions before PostgreSQL 18 are unaffected.

Affected Software

1 affected component

PostgreSQL postgresql>=18.0<18.5

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade PostgreSQL to a version that resolves this vulnerability.
Fixed in 18.5

Event History

Aug 13, 2026

Data Sourced

via Red Hat·01:29 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which PostgreSQL deployments are affected?

Only PostgreSQL 18 releases before 18.5 are affected. PostgreSQL versions before 18 are unaffected.

What level of access does an attacker need?

An attacker must be able to create an object that triggers the type confusion in pg_restore_attribute_stats(). Successful exploitation can execute arbitrary code as the operating system user running the database.

What is the practical impact of successful exploitation?

The attacker can execute arbitrary code with the privileges of the operating system account used by the PostgreSQL database process.

REDHAT-BUG-2515319: High severity PostgreSQL postgresql vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which PostgreSQL deployments are affected?

What level of access does an attacker need?

What is the practical impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which PostgreSQL deployments are affected?

What level of access does an attacker need?

What is the practical impact of successful exploitation?