REDHAT-BUG-2572554: High severity PostgreSQL postgresql vulnerability

Q: Which deployments are affected?

Only PostgreSQL 18 installations with a minor version earlier than 18.7 are affected. PostgreSQL versions before 18 are unaffected.

Q: What level of access does an attacker need?

The attacker must be a table maintainer and must be able to invoke the statistics import path with crafted values that trigger nested SET DATA TYPE operations during conversion.

Q: What is the impact of successful exploitation?

A successful exploit can allow arbitrary code execution as the operating system user that runs the PostgreSQL database server.

Published Nov 12, 2026

Updated

Type confusion in PostgreSQL statistics import allows a table maintainer to execute arbitrary code as the operating system user running the database, via nested SET DATA TYPE during conversion of values to import. Within major version 18, minor versions before PostgreSQL 18.7 are affected. Versions before PostgreSQL 18 are unaffected.

Affected Software

1 affected component

PostgreSQL postgresql>=18.0<18.7

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 18.7

Event History

Nov 12, 2026

Data Sourced

via Red Hat·02:33 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which deployments are affected?

Only PostgreSQL 18 installations with a minor version earlier than 18.7 are affected. PostgreSQL versions before 18 are unaffected.

What level of access does an attacker need?

The attacker must be a table maintainer and must be able to invoke the statistics import path with crafted values that trigger nested SET DATA TYPE operations during conversion.

What is the impact of successful exploitation?

A successful exploit can allow arbitrary code execution as the operating system user that runs the PostgreSQL database server.

REDHAT-BUG-2572554: High severity PostgreSQL postgresql vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which deployments are affected?

What level of access does an attacker need?

What is the impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

What level of access does an attacker need?

What is the impact of successful exploitation?