Skip to content
Threat Feed
Subscribe

Product

PostgreSQL (< 15.20)

1 brief RSS
high advisory

PostgreSQL: Privilege escalation via uncontrolled search path in CREATE EXTENSION (CVE-2026-6467)

PostgreSQL versions prior to 18.7, 17.12, 16.16, 15.20, and 14.25 contain an uncontrolled search path vulnerability that allows attackers with CREATE privileges to achieve privilege escalation via malicious schema manipulation.

PostgreSQL +4 cve-2026-6467 privilege-escalation database
1t 1c