CVE-2026-14673

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24

Description An untrusted search path in the amcheck function allows a user with EXECUTE privileges to execute arbitrary functions. This occurs when the user sets a hostile search path before calling the amcheck function, affecting owners of expression indexes that depend on the search path.

Recommendations Update to version 18.5 or later. Update to version 16.15 or later. Update to version 15.19 or later. Update to version 14.24 or later.