CPE
An untrusted search path vulnerability in the PostgreSQL vacuumdb utility allows a malicious database owner to execute arbitrary SQL commands via operator shadowing during --missing-stats-only operations.