CVE-2026-6469

Published: August 18, 2026Last modified: August 24, 2026

Description

Incorrect ownership assignment in PostgreSQL ALTER TABLE ALTER TYPE command reassigns ownership of dependent statistics objects to the current user. This wrongly allows the table owner to run DROP STATISTICS and ALTER STATISTICS via this improper ownership. It wrongly denies those commands to the prior statistics object owner. DROP TABLE remains able to remove statistics objects, so this exploit achieves nothing in many ownership arrangements. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.

Severity score breakdown

ParameterValue
Base score3.8
Attack VectorNETWORK
Attack complexityLOW
Privileges requiredHIGH
User interactionNONE
ScopeUNCHANGED
ConfidentialityNONE
Integrity impactLOW
Availability impactLOW
VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L

Status

ProductReleasePackageStatus
Alpaquita Linux23 LTSpostgresql15Unknown (15.2-r0)
25 LTSpostgresql17Fixed (17.11-r0)
Streampostgresql15Unknown (15.3-r0)
postgresql17Unknown (17.0-r1)
postgresql18Fixed (18.6-r0)

References

ON THIS PAGE