SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription rights to execute arbitrary SQL as a superuser. The attack takes effect when pg_createsubscriber next runs. Within major versions 17 and 18, minor versions before PostgreSQL 18.4 and 17.10 are affected. Versions before PostgreSQL 17 are unaffected.
CVSS Details
- CVSS 3.1 Base Score: 7.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql18Upgrade postgresql17 | May 15, 2026 | May 14, 2026 |
| Amazon_linux_2023 | — | Upgrade postgresql17-contribUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql17-debuginfoUpgrade postgresql18-upgradeUpgrade postgresql17-docs-debuginfoUpgrade postgresql17-plpython3Upgrade postgresql17Upgrade postgresql18-private-develUpgrade postgresql18-serverUpgrade postgresql18-pltclUpgrade postgresql18-debuginfoUpgrade postgresql17-upgrade-devel-debuginfoUpgrade postgresql17-server-devel-debuginfoUpgrade postgresql18-llvmjit-debuginfoUpgrade postgresql18-server-develUpgrade postgresql17-llvmjitUpgrade postgresql17-staticUpgrade postgresql17-docsUpgrade postgresql17-serverUpgrade postgresql17-upgrade-debuginfoUpgrade postgresql17-testUpgrade postgresql18-server-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql17-test-debuginfoUpgrade postgresql18-staticUpgrade postgresql17-server-develUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-docsUpgrade postgresql17-pltclUpgrade postgresql18-private-libsUpgrade postgresql18-plpython3Upgrade postgresql18-testUpgrade postgresql18-test-debuginfoUpgrade postgresql17-private-develUpgrade postgresql18-plperlUpgrade postgresql17-upgrade-develUpgrade postgresql18Upgrade postgresql17-plperlUpgrade postgresql18-contribUpgrade postgresql17-test-rpm-macrosUpgrade postgresql17-private-libsUpgrade postgresql17-pltcl-debuginfoUpgrade postgresql17-debugsourceUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql17-upgradeUpgrade postgresql17-plpython3-debuginfoUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql17-llvmjit-debuginfoUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-llvmjitUpgrade postgresql17-server-debuginfoUpgrade postgresql17-plperl-debuginfoUpgrade postgresql18-upgrade-develUpgrade postgresql18-debugsourceUpgrade postgresql17-contrib-debuginfoUpgrade postgresql18-test-rpm-macrosUpgrade postgresql17-private-libs-debuginfo | Jun 9, 2026 | May 14, 2026 |
| Debian | — | Upgrade postgresql-17 | Jul 23, 2026 | Jul 23, 2026 |
| Freebsd | — | Upgrade postgresql17-serverUpgrade postgresql16-serverUpgrade postgresql18-serverUpgrade postgresql18-clientUpgrade postgresql17-clientUpgrade postgresql14-clientUpgrade postgresql16-clientUpgrade postgresql15-clientUpgrade postgresql15-serverUpgrade postgresql14-server | May 21, 2026 | May 14, 2026 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 17, 2026 | Aug 17, 2026 |
| Postgres | — | Upgrade to PostgreSQL version 18.4Upgrade to PostgreSQL version 17.10 | May 14, 2026 | May 14, 2026 |
| Redhat_linux | — | Upgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresqlUpgrade postgresql-upgrade-debuginfoUpgrade postgresql18-contribUpgrade postgresql-testUpgrade postgis-utilsUpgrade pg_repack-debuginfoUpgrade pgvectorUpgrade postgresql-plperlUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-test-rpm-macrosUpgrade postgis-client-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade postgresql18-testUpgrade postgresql-server-debuginfoUpgrade postgresql18-plpython3Upgrade postgis-upgradeUpgrade postgis-upgrade-debuginfoUpgrade postgresql-plpython3Upgrade pg_repackUpgrade pgaudit-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-server-develUpgrade postgresql-debugsourceUpgrade postgresql-serverUpgrade postgresql18-test-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade postgresql18-staticUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql18-server-develUpgrade postgresql18-private-develUpgrade postgresql-contrib-debuginfoUpgrade postgresql18Upgrade postgisUpgrade postgresql18-plperlUpgrade postgresql18-upgrade-develUpgrade postgresql18-serverUpgrade postgis-debugsourceUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-docsUpgrade postgresql18-private-libsUpgrade pgauditUpgrade postgresql18-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-pltcl-debuginfoUpgrade postgis-clientUpgrade pgvector-debugsourceUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql18-plperl-debuginfoUpgrade postgresql-contribUpgrade postgis-docsUpgrade postgresql-upgradeUpgrade pgvector-debuginfoUpgrade postgresql18-server-debuginfoUpgrade postgresql18-debuginfoUpgrade postgresql-private-develUpgrade postgresql18-docsUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgres-decoderbufsUpgrade postgis-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-upgradeUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-staticUpgrade postgresql-private-libs-debuginfoUpgrade postgresql18-contrib-debuginfo | Sep 16, 2026 | May 14, 2026 |
| Rocky_linux | — | Upgrade pgaudit-debugsourceUpgrade postgresql-server-debuginfoUpgrade pgvector-debugsourceUpgrade pg_repack-debugsourceUpgrade pgvector-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-plpython3Upgrade postgis-utilsUpgrade postgis-docsUpgrade postgresql-docs-debuginfoUpgrade postgis-upgradeUpgrade postgresql-testUpgrade postgresql-private-libsUpgrade postgisUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-develUpgrade pg_repack-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-server-develUpgrade postgresql-plperl-debuginfoUpgrade postgis-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgis-clientUpgrade postgres-decoderbufsUpgrade postgis-debugsourceUpgrade pgauditUpgrade pg_repackUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-test-debuginfoUpgrade postgresql-plperlUpgrade postgresql-debuginfoUpgrade pgvectorUpgrade postgresql-staticUpgrade postgis-client-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-private-develUpgrade postgis-upgrade-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-contribUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-docs | Sep 17, 2026 | Sep 15, 2026 |
| Ubuntu | — | Upgrade postgresql-14Upgrade postgresql-17Upgrade postgresql-18Upgrade postgresql-16 | May 25, 2026 | May 21, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub