This vulnerability involves improper neutralization of special elements in SQL commands within the PostgreSQL pg_createsubscriber function. An attacker who has pg_create_subscription rights can exploit this flaw to execute arbitrary SQL commands as a superuser, potentially leading to full system compromise. The issue affects PostgreSQL major versions 17 and 18, specifically minor versions before 17.10 and 18.4. No information about an available patch or vendor advisory has been provided.

Successful exploitation allows an attacker with pg_create_subscription rights to execute arbitrary SQL commands with superuser privileges, which can lead to complete compromise of the database system, including unauthorized data access, modification, or destruction. The vulnerability has a CVSS v3.1 score of 7.2, indicating high severity with network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict pg_create_subscription rights to trusted users only and monitor for unusual activity related to subscription creation. Avoid running pg_createsubscriber in environments where untrusted users have subscription creation privileges.