Cpe:2.3:a:postgresql:postgresql:18.0:*:*:*:*:*:*:*

An untrusted search path vulnerability in the PostgreSQL vacuumdb utility allows a malicious database owner to execute arbitrary SQL commands via operator shadowing during --missing-stats-only operations.