CVE-2026-116308 · Runtime
NO FIX YET · SEE WHAT TO DO
PostgreSQL's dict_int text search dictionary reads past a buffer when given a zero-length token. A database user with normal query access can read portions of server memory.
first public Nov 12, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Any PostgreSQL server before the listed fixed releases is affected, since the flaw sits in a bundled text search dictionary. The exposure is limited to users who already have database access, so servers that only accept trusted application connections carry less risk. Teams on managed PostgreSQL should confirm the provider's patched version.
Not affected if managed-hosting-patched, no-untrusted-db-users
Who cares database, postgresql, self-hosted
SELECT version(); in psql and compare against the fixed releases.dict_int extension or dictionary is installed: SELECT * FROM pg_ts_dict WHERE dict_init::text LIKE '%dict_int%';18.717.1216.1615.20Buffer over-read in PostgreSQL dict_int allows a database user to disclose portions of server memory, via a zero-length token. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.
14.25