SecurityThe Hacker Newsabout 6 hours ago
PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw
1 min read
PostgreSQL patched CVE-2026-6471, a 12-year-old flaw allowing REPLICATION-role users to execute arbitrary code as the OS user. The fix adds output_plugin_libraries, a whitelist parameter defaulting to 'pgoutput, test_decoding'. Affected versions include 18.6, 17.11, 16.15, 15.19, and 14.24. Exploitation requires wal_level = logical.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
