Red Hat Security Advisory: postgresql:12 security update

CVE-2026-18408 is a vulnerability in PostgreSQL 12 where arbitrary code execution can occur through the inclusion of untrusted data in the pg_dump utility. This flaw allows an attacker to execute code by manipulating data processed by pg_dump. Red Hat has issued a security advisory (RHSA-2026:79028) providing an update for PostgreSQL 12 on Red Hat Enterprise Linux 8.4 Extended Life Cycle Long Life versions. The advisory rates the impact as important and provides updated packages to remediate the issue.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system via the pg_dump utility. This could lead to unauthorized control or compromise of the database server. The severity is rated as important by Red Hat, indicating a high impact on confidentiality, integrity, or availability.

Red Hat has released an official security update for PostgreSQL 12 addressing this vulnerability. Users of affected Red Hat Enterprise Linux 8.4 Extended Life Cycle Long Life versions should apply the update as described in the Red Hat advisory (https://access.redhat.com/articles/11258) to remediate the issue. No additional mitigations are specified beyond applying the official patch.