CVE-2026-116331
Public on 2026-11-12
Modified on 2026-11-14
Description
Type confusion in PostgreSQL min/max aggregate optimization allows an object creator to execute arbitrary code as the operating system user running the database, via a user-defined aggregate whose SORTOP option causes the planner to treat the aggregate's input and result as the same type when they differ. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.
CVSS v3 Base Score
See breakdown
Affected Packages
| Platform | Package | Release Date | Advisory | Status |
|---|---|---|---|---|
| Amazon Linux 2 - Postgresql14 Extra | libpq | Not Affected | ||
| Amazon Linux 2023 | libpq | Not Affected | ||
| Amazon Linux 2027 Preview | libpq | Not Affected | ||
| Amazon Linux 2 - Core | postgresql | Pending Fix | ||
| Amazon Linux 2 - Postgresql14 Extra | postgresql | Pending Fix | ||
| Amazon Linux 2023 | postgresql15 | Pending Fix | ||
| Amazon Linux 2023 | postgresql16 | Pending Fix | ||
| Amazon Linux 2027 Preview | postgresql16 | Pending Fix | ||
| Amazon Linux 2023 | postgresql17 | Pending Fix | ||
| Amazon Linux 2027 Preview | postgresql17 | Pending Fix | ||
| Amazon Linux 2023 | postgresql18 | Pending Fix | ||
| Amazon Linux 2027 Preview | postgresql18 | Pending Fix |
CVSS Scores
| Score Type | Score | Vector | |
|---|---|---|---|
| Amazon Linux | CVSSv3 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |