A vulnerability in PostgreSQL's pg_dump tar-format restore.sql allows a compromised origin server to execute arbitrary code as the client OS user running psql. This issue arises from untrusted data inclusion via a predictable restriction key in restore.sql, which is undocumented. Versions prior to PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.