PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution
- ID
- 21578
- Status
- new
- Published
- 04 Sep 2026, 11:20 PM
- Fetched
- 05 Sep 2026, 12:53 AM
- Provider
- The Hacker News
- Category
- security
- Original URL
- https://thehackernews.com/2026/09/postgresql-fixes-12-year-old-logical.html
- Source URL
- https://feeds.feedburner.com/TheHackersNews
Excerpt
PostgreSQL has released updates to address a security flaw that allows an account with the REPLICATION attribute to run arbitrary code as the operating-system user running the database server. The flaw, tracked as CVE-2026-6471 (CVSS score: 7.2), has been present since logical decoding was introduced in PostgreSQL 9.4 in 2014. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are
Summary
No summary yet. It will appear after the daemon summarizes this item.