This advisory addresses three related vulnerabilities in PostgreSQL 16 that enable arbitrary code execution during database restore operations. The vulnerabilities are identified as CVE-2025-8713, CVE-2025-8714, and CVE-2025-8715. Red Hat has released an update for PostgreSQL 16 in Red Hat Enterprise Linux 9.4 Extended Update Support to fix these issues. The advisory does not provide CVSS scores but classifies the impact as Important. The vulnerabilities are linked to the restore operation functionality within PostgreSQL, potentially allowing attackers to execute code.

Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code during the restore operation of PostgreSQL databases. This could lead to unauthorized code execution on affected systems, potentially compromising system integrity and confidentiality. The advisory rates the security impact as Important, indicating a high risk but no known exploits in the wild have been reported at this time.

Red Hat has released an official security update for PostgreSQL 16 as part of Red Hat Enterprise Linux 9.4 Extended Update Support. Users should apply the update promptly following Red Hat's guidance at https://access.redhat.com/articles/11258 to remediate these vulnerabilities. No alternative mitigations or workarounds are indicated in the advisory. Patch status is confirmed as an official fix provided by Red Hat.