CVE-2026-83534

Published: Sep 6, 2026Modified: Sep 9, 2026

6.4

Vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

Exploitability: 0.5 / Impact: 5.9

Source: f86ef6dc-4d3a-42ad-8f28-e6d5547a5007 (Secondary)

Description

PostgreSQL Anonymizer contains a vulnerability in the anon.anonymize_database_parallel() function that allows the owner of a table to run arbitrary code with superuser privilege. The issue is fixed in PostgreSQL Anonymizer 3.2.0 and later versions

Related CWEs

CWE-250

Execution with Unnecessary Privileges

The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.

References (1)

https://gitlab.com/dalibo/postgresql_anonymizer/-/issues/666

Source: f86ef6dc-4d3a-42ad-8f28-e6d5547a5007

Timeline

No history available yet.