{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3atimescalepgvectorscale/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:timescale:pgvectorscale:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-116489"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["pgvectorscale (\u003c 0.9.1)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","privilege-escalation","database"],"_cs_type":"advisory","_cs_vendors":["Timescale"],"content_html":"\u003cp\u003eTimescale pgvectorscale versions prior to 0.9.1 are susceptible to a type confusion vulnerability. The flaw originates from the ability of low-privileged database users to shadow pgvector's vector type or operators. An attacker possessing 'CREATE' privilege on the 'vectorscale' schema can define shadow objects and subsequently execute DiskANN index creation and query operations using malicious values. This leads to out-of-bounds read/write operations within the database process memory.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation may result in the disclosure of sensitive memory contents, server process crashes leading to denial-of-service, or the escalation of local database privileges by an authenticated user.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade the pgvectorscale extension to version 0.9.1 or later to remediate the vulnerability.\u003c/li\u003e\n\u003cli\u003eAudit current database user privileges; restrict 'CREATE' permissions on the 'vectorscale' schema to trusted administrative or service accounts.\u003c/li\u003e\n\u003cli\u003eMonitor database error logs for repeated segmentation faults or memory-related crashes originating from the pgvectorscale extension.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-26T17:44:43Z","date_published":"2026-10-26T17:44:43Z","id":"https://feed.craftedsignal.io/briefs/2026-10-timescale-pgvectorscale-vulnerability/","summary":"Timescale pgvectorscale before 0.9.1 contains a type confusion vulnerability allowing authenticated users with schema creation privileges to trigger out-of-bounds memory access through crafted DiskANN index operations.","title":"Timescale pgvectorscale: Type confusion in DiskANN index handling (CVE-2026-116489)","url":"https://feed.craftedsignal.io/briefs/2026-10-timescale-pgvectorscale-vulnerability/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:timescale:pgvectorscale:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}