VYPR
Medium severity6.5NVD Advisory· Published Oct 28, 2026

CVE-2026-110181

CVE-2026-110181

Description

PostgreSQL Anonymizer contains a vulnerability related to anonymization functions defined using SQL-standard function bodies. PostgreSQL analyses such functions at declaration time, while Anonymizer only attempts to check them at execution time. This problem can be exploited by any user with the TEMPORARY privilege. The issue is fixed in PostgreSQL Anonymizer 3.3.0 and later versions.

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.