High severity8.8NVD Advisory· Published Nov 12, 2026
CVE-2026-120147
CVE-2026-120147
Description
Use after free in the PostgreSQL dblink extension allows an object creator to execute arbitrary code as the operating system user running the database, via type conversion code that re-enters dblink and closes a connection whose results an outer dblink call is reading. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <18.7, <17.12, <16.16, <15.20, <14.25
- Range: <18.7, <17.12, <16.16, <15.20, <14.25
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.