CVE-2026-116313

PostgreSQL contains an untrusted search path vulnerability in the vacuumdb utility, specifically within the --missing-stats-only catalog query. This flaw allows a database owner to execute arbitrary SQL as the user running the vacuumdb process by shadowing operators. Affected versions include Pos...