REDHAT-BUG-2572533: High severity PostgreSQL postgresql vulnerability
Published Nov 12, 2026
·Updated
Type confusion from incomplete PostgreSQL type-cache invalidation allows an object creator to execute arbitrary code as the operating system user running the database, via a composite type change while its cache entry is being populated. Within major version 18, minor versions before PostgreSQL 18.7 are affected. Versions before PostgreSQL 18 are unaffected.
Affected Software
1 affected component
PostgreSQL postgresql>=18.0<18.7
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 18.7
Event History
Nov 12, 2026
Data Sourced
via Red Hat·02:31 PM
DescriptionSeverityAffected Software