Privilege Escalation Vulnerability in PostgreSQL's pglogical Queue Mechanism

CVE-2026-50736

What is CVE-2026-50736?

The pglogical queue mechanism in PostgreSQL is susceptible to a vulnerability that allows an attacker to execute arbitrary SQL commands on the subscriber's server as a superuser. This occurs due to the queue's handling of out-of-band commands, which processes message payloads at elevated privilege levels. If an attacker can direct a subscription to a controlled endpoint, they can escalate their permissions from a lower role to full superuser privileges, effectively breaching the multi-tenant isolation typically maintained in shared PostgreSQL deployments. Managed environments are particularly at risk as they may involve non-superuser roles being delegated the ability to create subscriptions.

References