CVE-2026-6472

Published: May 14, 2026Modified: Jun 17, 2026

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.5

Source: f86ef6dc-4d3a-42ad-8f28-e6d5547a5007 (Secondary)

Description

Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types. That is to say, the victim will execute arbitrary SQL functions of the attacker's choice. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.

Affected (5)

Products: Postgresql: Postgresql

Postgresql

1 product

Postgresql

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Postgresql Postgresql	Before 14.23
Postgresql Postgresql	From 15.0 to 15.18
Postgresql Postgresql	From 16.0 to 16.14
Postgresql Postgresql	From 17.0 to 17.10
Postgresql Postgresql	From 18.0 to 18.4

Related CWEs

CWE-862

Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

References (1)

https://www.postgresql.org/support/security/CVE-2026-6472/

Source: f86ef6dc-4d3a-42ad-8f28-e6d5547a5007

PatchVendor Advisory

Timeline

No history available yet.