Untrusted Search Path Vulnerability in PostgreSQL amcheck Function
CVE-2026-14673

3.8LOW

Key Information:

Vendor

PostgreSQL
Status
Postgresql
Vendor
CVE Published:
13 August 2026

What is CVE-2026-14673?

The untrusted search path vulnerability in PostgreSQL's amcheck function allows users with EXECUTE privileges to potentially execute arbitrary functions. By manipulating the search path before invoking amcheck, attackers can target expression indexes to gain unauthorized access to data. This flaw affects versions up to 18.4, 16.14, 15.18, and 14.23, presenting a significant risk to PostgreSQL installations if not addressed.

Affected Version(s)

PostgreSQL 18 < 18.5

PostgreSQL 16 < 16.15

PostgreSQL 15 < 15.19

References

https://www.postgresql.org/support/security/CVE-2026-14673/

CVSS V3.1

Score:
3.8
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

The PostgreSQL project thanks ็Ž‹่ทƒๆž— and Jacob Brazeal for reporting this problem.
.