AZL-113708
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-113708.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-113708
- Upstream
- CVE-2026-116316
- Published
- 2026-11-12T15:17:39Z
- Modified
- 2026-11-13T14:17:13Z
- Summary
- CVE-2026-116316 affecting package postgresql 16.15-1
- Details
-
Improper protection of alternate path in PostgreSQL security-restricted operations allows an object creator to execute arbitrary SQL as the operation's caller, via a domain, enum, or range type created in pg_temp. The victim session must later run a query containing an unqualified type name, e.g. "SELECT '1'::bigint"; autovacuum and other common security-restricted operation users do not do so, so they are unaffected. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.
- References