CVE-2026-116303

PostgreSQL contains a missing authorization vulnerability in type conversion where a database user can bypass EXECUTE privileges to invoke cast functions. This bypass can occur via foreign keys , to_json() , and other conversion mechanisms. To succeed, an attacker must identify specific access-re...