High severity7.2NVD Advisory· Published Aug 13, 2026· Updated Aug 29, 2026
CVE-2026-6471
CVE-2026-6471
Description
Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary code as that account. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
52- osv-coords50 versionspkg:rpm/opensuse/postgresql14&distro=openSUSE%20Leap%2016.0pkg:rpm/almalinux/postgresql18-serverpkg:rpm/almalinux/postgresql18-private-libspkg:rpm/almalinux/postgresql-pltclpkg:rpm/almalinux/postgis-upgradepkg:rpm/almalinux/postgresql18-server-develpkg:rpm/almalinux/postgresql-test-rpm-macrospkg:rpm/almalinux/postgresql-upgradepkg:rpm/almalinux/postgresql18-contribpkg:rpm/almalinux/postgresql18-private-develpkg:rpm/almalinux/pg_repackpkg:rpm/almalinux/postgispkg:rpm/almalinux/postgresql-private-develpkg:rpm/almalinux/postgresql-staticpkg:rpm/almalinux/postgresql-testpkg:rpm/almalinux/postgresql18-docspkg:rpm/almalinux/postgresql18-plpython3pkg:rpm/almalinux/postgresql18-staticpkg:rpm/almalinux/postgresql18-upgradepkg:rpm/almalinux/postgis-utilspkg:rpm/almalinux/postgres-decoderbufspkg:rpm/almalinux/postgresql-contribpkg:rpm/almalinux/postgresql-upgrade-develpkg:rpm/almalinux/postgresql18-plperlpkg:rpm/almalinux/postgresql18-upgrade-develpkg:rpm/almalinux/postgresql-docspkg:rpm/almalinux/postgresql-serverpkg:rpm/almalinux/postgresqlpkg:rpm/almalinux/postgresql-plperlpkg:rpm/almalinux/pgvectorpkg:rpm/almalinux/postgis-docspkg:rpm/almalinux/postgresql-private-libspkg:rpm/almalinux/postgresql-server-develpkg:rpm/almalinux/pgauditpkg:rpm/almalinux/postgis-clientpkg:rpm/opensuse/postgresql17&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/postgresql14&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/postgresql16&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/postgresql16&distro=openSUSE%20Leap%2016.0pkg:rpm/almalinux/postgresql18-testpkg:rpm/opensuse/postgresql15&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/postgresql17&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/postgresql18&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/postgresql18-mini&distro=openSUSE%20Leap%2016.0pkg:rpm/almalinux/postgresql18pkg:rpm/almalinux/postgresql18-test-rpm-macrospkg:bitnami/postgresqlpkg:rpm/almalinux/postgresql-plpython3pkg:rpm/opensuse/postgresql15&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/postgresql18&distro=openSUSE%20Tumbleweed
< 14.24-160000.1.1+ 49 more
- (no CPE)range: < 14.24-160000.1.1
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 3.5.3-6.module_el9.8.0+311+c39b793b
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 1.5.1-1.module_el9.6.0+146+c54fdeca
- (no CPE)range: < 3.5.3-6.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 3.5.3-6.module_el9.8.0+311+c39b793b
- (no CPE)range: < 2.4.0-1.Final.module_el9.4.0+66+eb9878bc
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 0.6.2-2.module_el9.6.0+167+4e561146
- (no CPE)range: < 3.5.3-6.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 16.0-1.module_el9.4.0+66+eb9878bc
- (no CPE)range: < 3.5.3-6.module_el9.8.0+311+c39b793b
- (no CPE)range: < 17.11-1.1
- (no CPE)range: < 14.24-1.1
- (no CPE)range: < 16.15-1.1
- (no CPE)range: < 16.15-160000.1.1
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 15.19-160000.1.1
- (no CPE)range: < 17.11-160000.1.1
- (no CPE)range: < 18.6-160000.1.1
- (no CPE)range: < 18.6-160000.1.1
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 14.24.0
- (no CPE)range: < 16.15-1.module_el9.8.0+311+c39b793b
- (no CPE)range: < 15.19-1.1
- (no CPE)range: < 18.6-1.1
cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*range: >=14.0,<14.24
- (no CPE)range: <18.6, <17.11, <16.15, <15.19, <14.24
Patches
Vulnerability mechanics
References
1- www.postgresql.org/support/security/CVE-2026-6471/nvdVendor Advisory
News mentions
6- Weekly Cybersecurity Newsletter Bulletin – Microsoft 0-day, FortiOS, PAN-OS Flaw, Revolut Data Breach, and 20+ StoriesCyber Security News · Sep 14, 2026
- ⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and MoreThe Hacker News · Sep 7, 2026
- 12-Year-Old PostgreSQL Flaw Lets Attackers Execute Code on Database ServersCyber Security News · Sep 7, 2026
- PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code ExecutionThe Hacker News · Sep 4, 2026
- 12-Year-Old PostgreSQL Vulnerability Enables Database, Server TakeoverSecurityWeek · Sep 4, 2026
- PostgreSQL: 25 Vulnerabilities Disclosed, Many Allowing Code ExecutionVypr Intelligence · Aug 13, 2026