---
id: "CVE-2026-116330"
page: "https://infrastack.ai/live/CVE-2026-116330"
kind: "vulnerability"
aliases: ["CVE-2026-116330"]
title: "PostgreSQL pg_dump: crafted tar dump lets a server run code on the client"
severity: "high"
cvss: 8.8
epss: null
exploited: false
status: "open"
category: "runtime"
products: [{"name": "PostgreSQL", "fixed": [], "affected": "", "ecosystem": "runtime"}]
ecosystems: ["runtime"]
tags: ["pg_dump", "postgresql", "psql", "runtime", "self-hosted"]
not_affected_if: ["custom-or-directory-format-dumps", "no-tar-restores", "trusted-origin-servers"]
published_at: "2026-11-12T15:17:41+00:00"
first_seen_at: "2026-11-12T15:41:55+00:00"
updated_at: "2026-11-12T15:43:24+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116330", "first_seen_at": "2026-11-12T15:41:55+00:00"}]
exploit_sources: []
---

# PostgreSQL pg_dump: crafted tar dump lets a server run code on the client

Link for people: https://infrastack.ai/live/CVE-2026-116330 (this .md is for agents)

A flaw in pg_dump's tar-format restore handling lets a compromised origin server include untrusted data in restore.sql, which psql then executes. An attacker who controls the origin database can run arbitrary code as the operating system account that runs psql.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- runtime:PostgreSQL affected range not listed fixed no fixed version listed

## How to check

- Run `psql --version` and `pg_dump --version` on machines that restore tar-format dumps from other servers, and compare against the fixed versions below.
- Look for tar-format dumps restored with `psql` from origin servers you do not fully control.

## Fix

- PostgreSQL 18: move to `18.7`
- PostgreSQL 17: move to `17.12`
- PostgreSQL 16: move to `16.16`
- PostgreSQL 15: move to `15.20`
- PostgreSQL 14: move to `14.25`

## Timeline

- 2026-11-12T15:41:55+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-116330

## From the sources

Untrusted data inclusion in PostgreSQL pg_dump tar-format restore.sql allows a compromised origin server to execute arbitrary code as the client operating system account running psql, via the predictable restriction key in restore.sql.  This is a gap in the fix for CVE-2025-8714.  restore.sql is undocumented.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_