CVE-2026-14666

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24

Description Incomplete tracking of changes to role membership, role attributes, and database ownership allows a query to continue using cached row-level security policies after changes require a different policy due to plan reuse. Row-level security (RLS) is a security feature that restricts which rows of a table are visible to a user based on their role or attributes. Stale policies remain active until the cache is invalidated by another event or the session ends. This allows a remote attacker to perform unauthorized reads and modifications of data that were previously permitted but are now forbidden, provided the attack is tailored to the application's specific pattern of privilege removal and role-specific security policies.

Recommendations Update to version 18.5 or later. Update to version 17.11 or later. Update to version 16.15 or later. Update to version 15.19 or later. Update to version 14.24 or later.