Search: CVE-2026-116330

CVE-2026-116330 is a vulnerability in PostgreSQL where untrusted data inclusion in the pg_dump tar-format restore.sql file allows a compromised origin server to execute arbitrary code as the client OS user running psql. This issue affects versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 and represents a gap in the previous fix for CVE-2025-8714. The restore.sql file is undocumented, increasing the risk of unnoticed exploitation.