← CVE Intelligence

CVE-2026-14671

PostgreSQL refint plan cache type confusion executes arbitrary code PUBLISHED

Description (CNA)

Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating system user running the database. The fix for this emerged as a non-security bug report, and the fix appear in the git repository with subject "refint: Remove plan cache.", without a CVE number. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.

Affected (CNA)

Vendor / productVersions
n/a / PostgreSQLaffected 18 before 18.6; affected 17 before 17.11; affected 16 before 16.15; affected 15 before 15.19; affected 0 before 14.24

CWE

CWE-843

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.