CVE-2026-2007

Name of the Vulnerable Software and Affected Versions PostgreSQL versions 18.0 and 18.1

Description A heap buffer overflow exists in PostgreSQL's pg trgm component. A database user can exploit this issue with a crafted input string, potentially leading to unknown impacts, including possible privilege escalation. The attacker has limited control over the data written to memory.

Recommendations Update PostgreSQL to a version beyond 18.1.