CVE-2026-50738

Name of the Vulnerable Software and Affected Versions pglogical (affected versions not specified)

Description A use-after-free condition exists in the worker signaling code. This occurs when a worker structure is dereferenced after the underlying slot has been freed or recycled during normal worker lifecycle events. A low-privileged user can trigger this condition by influencing the timing of worker start, stop, and restart operations. This typically results in the crashing of replication workers, affecting availability, but could potentially be used to achieve remote code execution with the privileges of the PostgreSQL backend.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.