CVE-2026-6476 — PostgreSQL pg_createsubscriber allows SQL injection via subscription name

CVE-2026-6476

PostgreSQL pg_createsubscriber allows SQL injection via subscription name PUBLISHED

Description (CNA)

SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription rights to execute arbitrary SQL as a superuser. The attack takes effect when pg_createsubscriber next runs. Within major versions 17 and 18, minor versions before PostgreSQL 18.4 and 17.10 are affected. Versions before PostgreSQL 17 are unaffected.

Affected (CNA)

Vendor / product	Versions
n/a / PostgreSQL	affected 18 before 18.4; affected 17 before 17.10

CWE

CWE-89

References

https://www.postgresql.org/support/security/CVE-2026-6476/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.