A vulnerability in PostgreSQL prior to versions 18.7, 17.12, 16.16, 15.20, and 14.25 allows an object creator to execute arbitrary SQL as the caller of a security-restricted operation. This occurs due to improper protection of an alternate path involving domain, enum, or range types created in the temporary schema pg_temp. The exploit requires the victim session to run a query with an unqualified type name, which common security-restricted operations like autovacuum do not perform.