CVE-2026-14673

Published: Aug 13, 2026Modified: Aug 29, 2026

3.8

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

Exploitability: 1.2 / Impact: 2.5

Source: f86ef6dc-4d3a-42ad-8f28-e6d5547a5007 (Secondary)

Description

Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE privilege to execute arbitrary functions as the owners of expression indexes that depend on the search path, via setting a hostile search path before calling the amcheck function. Within major versions 18, 16, 15, and 14, minor versions before PostgreSQL 18.6, 16.15, 15.19, and 14.24 are affected. PostgreSQL 17 is unaffected.

Affected (4)

Products: Postgresql: Postgresql

Postgresql

1 product

Postgresql

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Postgresql Postgresql	From 14.0 to 14.24
Postgresql Postgresql	From 15.0 to 15.19
Postgresql Postgresql	From 16.0 to 16.15
Postgresql Postgresql	From 18.0 to 18.5

Related CWEs

CWE-426

Untrusted Search Path

The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

References (1)

https://www.postgresql.org/support/security/CVE-2026-14673/

Source: f86ef6dc-4d3a-42ad-8f28-e6d5547a5007

Vendor Advisory

Timeline

No history available yet.