SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription rights to execute arbitrary SQL as a superuser. The attack takes effect when pg_createsubscriber next runs. Within major versions 17 and 18, minor versions before PostgreSQL 18.4 and 17.10 are affected. Versions before PostgreSQL 17 are unaffected.
CVSS Details
- CVSS 3.1 Base Score: 7.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql17Upgrade postgresql18 | May 15, 2026 | May 14, 2026 |
| Amazon_linux_2023 | — | Upgrade postgresql17-docsUpgrade postgresql18-server-develUpgrade postgresql17-testUpgrade postgresql17-docs-debuginfoUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-server-debuginfoUpgrade postgresql17-upgrade-debuginfoUpgrade postgresql17-debuginfoUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql17Upgrade postgresql17-llvmjitUpgrade postgresql18-debuginfoUpgrade postgresql17-contribUpgrade postgresql18-docs-debuginfoUpgrade postgresql17-serverUpgrade postgresql17-staticUpgrade postgresql17-upgrade-devel-debuginfoUpgrade postgresql18-pltclUpgrade postgresql18-llvmjit-debuginfoUpgrade postgresql17-server-devel-debuginfoUpgrade postgresql18-upgradeUpgrade postgresql18-contrib-debuginfoUpgrade postgresql17-test-debuginfoUpgrade postgresql18-private-develUpgrade postgresql18-serverUpgrade postgresql17-plpython3Upgrade postgresql18-staticUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-docsUpgrade postgresql17-pltclUpgrade postgresql17-plperlUpgrade postgresql17-llvmjit-debuginfoUpgrade postgresql17-plperl-debuginfoUpgrade postgresql18-llvmjitUpgrade postgresql17-server-debuginfoUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql18Upgrade postgresql18-debugsourceUpgrade postgresql17-contrib-debuginfoUpgrade postgresql18-plperlUpgrade postgresql17-upgrade-develUpgrade postgresql17-private-develUpgrade postgresql18-contribUpgrade postgresql17-test-rpm-macrosUpgrade postgresql17-pltcl-debuginfoUpgrade postgresql17-plpython3-debuginfoUpgrade postgresql17-debugsourceUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql17-private-libsUpgrade postgresql18-upgrade-develUpgrade postgresql17-private-libs-debuginfoUpgrade postgresql18-testUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql17-upgradeUpgrade postgresql18-plpython3Upgrade postgresql18-test-debuginfoUpgrade postgresql18-private-libsUpgrade postgresql17-server-devel | Jun 9, 2026 | May 14, 2026 |
| Debian | — | Upgrade postgresql-17 | Jul 23, 2026 | Jul 23, 2026 |
| Freebsd | — | Upgrade postgresql17-clientUpgrade postgresql14-serverUpgrade postgresql16-clientUpgrade postgresql15-clientUpgrade postgresql15-serverUpgrade postgresql14-clientUpgrade postgresql18-serverUpgrade postgresql18-clientUpgrade postgresql16-serverUpgrade postgresql17-server | May 21, 2026 | May 14, 2026 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 17, 2026 | Aug 17, 2026 |
| Postgres | — | Upgrade to PostgreSQL version 18.4Upgrade to PostgreSQL version 17.10 | May 14, 2026 | May 14, 2026 |
| Redhat_linux | — | Upgrade postgresql-upgrade-debuginfoUpgrade postgresql18-contribUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresqlUpgrade postgresql-test-debuginfoUpgrade postgresql-plperlUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql18-test-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql18-plpython3Upgrade postgis-upgradeUpgrade postgresql-testUpgrade postgresql18-test-rpm-macrosUpgrade postgis-client-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade postgresql18-testUpgrade postgis-utilsUpgrade postgresql18-staticUpgrade postgres-decoderbufs-debugsourceUpgrade pgaudit-debugsourceUpgrade postgresql-docs-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade postgresql-private-libsUpgrade postgresql-server-develUpgrade postgresql-plperl-debuginfoUpgrade postgresql-plpython3Upgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-server-develUpgrade postgresql18-private-develUpgrade pgvectorUpgrade postgresql-serverUpgrade pg_repack-debuginfoUpgrade pgaudit-debuginfoUpgrade pg_repackUpgrade postgresql-debugsourceUpgrade postgis-upgrade-debuginfoUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade postgresql-private-develUpgrade postgresql18-upgrade-develUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgis-docsUpgrade postgis-debugsourceUpgrade postgresql-contribUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-server-debuginfoUpgrade postgresql18-docsUpgrade postgresql18-debuginfoUpgrade pgvector-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgisUpgrade postgresql18Upgrade postgresql-private-libs-debuginfoUpgrade pgauditUpgrade postgresql18-private-libsUpgrade postgresql18-plperlUpgrade postgresql18-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-pltcl-debuginfoUpgrade postgis-clientUpgrade pgvector-debugsourceUpgrade postgresql-staticUpgrade pg_repack-debugsourceUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-upgradeUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-debuginfoUpgrade postgres-decoderbufsUpgrade postgis-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-docsUpgrade postgresql18-server | Sep 16, 2026 | May 14, 2026 |
| Rocky_linux | — | Upgrade pgaudit-debugsourceUpgrade postgresql-plpython3Upgrade postgresql-testUpgrade postgis-docsUpgrade postgis-utilsUpgrade postgis-upgradeUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgradeUpgrade pg_repack-debuginfoUpgrade postgresql-upgrade-develUpgrade pgaudit-debuginfoUpgrade postgresql-private-libsUpgrade pgvector-debuginfoUpgrade postgisUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-server-develUpgrade pgvector-debugsourceUpgrade postgresql-debugsourceUpgrade postgresql-docs-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-serverUpgrade postgres-decoderbufsUpgrade postgresql-test-debuginfoUpgrade postgis-client-debuginfoUpgrade postgresql-plperlUpgrade pgvectorUpgrade postgresql-staticUpgrade postgis-upgrade-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgis-debugsourceUpgrade pgauditUpgrade pg_repackUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-private-develUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgis-clientUpgrade postgresql-upgrade-debuginfoUpgrade postgis-debuginfoUpgrade postgresql-debuginfo | Sep 17, 2026 | Sep 15, 2026 |
| Ubuntu | — | Upgrade postgresql-16Upgrade postgresql-18Upgrade postgresql-17Upgrade postgresql-14 | May 25, 2026 | May 21, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub