PT-2026-129069
CVE-2026-105615
·
Published
2026-10-28
·
Updated
2026-10-28
Description by
CVSS 3.1
3.5
LowMetricsAV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
PostgreSQL's optimized statistics on a table are visible as long as you have SELECT privilege on said table. A masked role can therefore read a limited subset of the data through the statistics view's histograms and mcvs. The vulnerability is resolved in PostgreSQL Anonymizer 3.3.0 and later versions.
Found an issue in the description? Have something to add? Feel free to write us 👾