CVE-2026-50735

Name of the Vulnerable Software and Affected Versions pglogical (affected versions not specified)

Description The apply worker fails to sufficiently validate the length of certain fields in incoming replication protocol messages before copying them, leading to an out-of-bounds read. An attacker acting as a publisher can send crafted messages that cause the subscriber's apply worker to read beyond the bounds of an allocated buffer, which may result in the disclosure of adjacent process memory or a worker crash. Exploitation requires the ability to direct a subscription to an endpoint controlled by the attacker. While this typically requires superuser privileges, it is particularly critical in managed deployments where subscription creation is delegated to non-superuser roles.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.