Red Hat Security Advisory: postgresql security update

CVE-2026-6637 is an arbitrary code execution vulnerability in the 'refint' module of PostgreSQL, an advanced object-relational database management system. The vulnerability affects various PostgreSQL versions distributed with Red Hat Enterprise Linux. Red Hat Product Security has issued an important security advisory (RHSA-2026:50811) detailing the issue and providing updated packages to remediate the vulnerability. The advisory covers multiple Red Hat Enterprise Linux variants and architectures. The vulnerability is tracked under CWE-120 (buffer copy without checking size of input).

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on affected systems running vulnerable PostgreSQL versions. This could lead to full compromise of the database server. The severity is rated as high by Red Hat, indicating significant risk to affected systems.

Red Hat has released security updates that fix this vulnerability. Users should apply the updated PostgreSQL packages as described in the Red Hat advisory RHSA-2026:50811 and the referenced article https://access.redhat.com/articles/11258. Systems running affected versions should be updated promptly to mitigate the risk. No indication of in-the-wild exploitation is currently known.