CVE-2024-10976 is a vulnerability in PostgreSQL where incomplete tracking of tables with row-level security policies allows a reused query to view or modify rows it should not access. This occurs when queries planned under one role are executed under different roles, particularly involving subqueries, WITH queries, security invoker views, or SQL-language functions referencing tables with row security. The flaw affects databases using CREATE POLICY for row security and can lead to unauthorized reads and modifications. Versions prior to PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected. The CVSS score is 4.2 (medium severity).