Search: CVE-2026-6475

CVE-2026-6475 is a high-severity vulnerability in PostgreSQL affecting versions prior to 18.4, 17.10, 16.14, 15.18, and 14.23. It involves symbolic link (symlink) following in the pg_basebackup plain format and pg_rewind utilities, allowing an origin superuser to overwrite local files such as /var/lib/postgres/. bashrc. This can lead to hijacking the operating system account if relevant actions are taken between these commands and server restart. The vulnerability relies on the implicit trust of the origin superuser when starting the server, especially with features like shared_preload_libraries.