PT-2026-145828
CVE-2026-120142
·
Published
2026-11-12
·
Updated
2026-11-12
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
PostgreSQL versions 17.0 through 17.11
PostgreSQL versions 18.0 through 18.6
Description
Type confusion in anonymous RECORD types allows an object creator to execute arbitrary code as the operating system user running the database. This occurs when row types have dropped attributes in the same positions but possess different widths or alignments.
Recommendations
Update PostgreSQL versions 17.0 through 17.11 to version 17.12.
Update PostgreSQL versions 18.0 through 18.6 to version 18.7.
Found an issue in the description? Have something to add? Feel free to write us 👾