CVE-2026-120145 · Runtime
NO FIX YET · SEE WHAT TO DO
PostgreSQL logical replication does not check authorization when a replication target names a system catalog, so a compromised publisher can make a superuser-owned subscription execute arbitrary code as the operating system user running it. Only subscriptions owned by a superuser are vulnerable.
first public Nov 12, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Only servers running PostgreSQL before the fixed versions that use logical replication with a subscription owned by a superuser are exposed. A compromised publisher, meaning the upstream database feeding the subscription, is the attack path. Servers without logical replication subscriptions owned by superusers can skip it.
Not affected if no-logical-replication, non-superuser-subscription-owner, patched-versions
Who cares database, logical-replication, postgresql, self-hosted
SELECT current_setting('server_version'); and compare against the fixed versions below.SELECT subname, subowner::regrole FROM pg_subscription; and check whether any subscription is owned by a superuser.18.717.1216.1615.20Missing authorization in PostgreSQL logical replication allows a compromised publisher to execute arbitrary code as the operating system user running the superuser-owned subscription, via naming a system catalog as a replication target. Only subscriptions owned by a superuser are vulnerable. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.
14.25