CVE-2026-29089

Published: Mar 6, 2026Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 2.0 / Impact: 6.0

Source: security-advisories@github.com (Secondary)

Description

TimescaleDB is a time-series database for high-performance real-time analytics packaged as a Postgres extension. From version 2.23.0 to 2.25.1, PostgreSQL uses the search_path setting to locate unqualified database objects (tables, functions, operators). If the search_path includes user-writable schemas a malicious user can create functions in that schema that shadow builtin postgres functions and will be called instead of the postgres functions leading to arbitrary code execution during extension upgrade. This issue has been patched in version 2.25.2.

Affected (1)

Products: Timescale: Timescaledb

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Timescale Timescaledb	From 2.23.0 to 2.25.2

Related CWEs

Untrusted Search Path

The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

References (4)

https://github.com/timescale/timescaledb/commit/9a8f7f8bdeb99e6abae0786ffe526791a8628ce3

Source: security-advisories@github.com

Patch

https://github.com/timescale/timescaledb/pull/9331

Source: security-advisories@github.com

Issue TrackingPatch

https://github.com/timescale/timescaledb/releases/tag/2.25.2

Source: security-advisories@github.com

ProductRelease Notes

https://github.com/timescale/timescaledb/security/advisories/GHSA-vgp2-jj5c-828m

Source: security-advisories@github.com

MitigationVendor Advisory

Timeline

No history available yet.