CVE-2026-103484

A flaw was found in pgvector. An authenticated database user can trigger an out-of-bounds write during an Inverted File Flat IVFFlat index build operation. This vulnerability may allow the attacker to achieve arbitrary code execution or cause a crash resulting in a denial of service on the databa...

Linux Distros Unpatched Vulnerability : CVE-2026-103484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution. CVE-2026-103484 Not...

CVE-2026-103484

IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution...

DEBIAN-CVE-2026-103484

IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution...

CVE-2026-103484

IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution...

CVE-2026-103484 pgvector buffer overflow in IVFFlat index build

IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution...

CVE-2026-103484

A flaw in pgvector before version 0.8.7 allows an authenticated database user to trigger an out-of-bounds write during an Inverted File Flat (IVFFlat) index build operation. This vulnerability can lead to arbitrary code execution or a crash resulting in a denial of service on the database server....

EUVD-2026-91044

IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution...

CVE-2026-103484

IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution...

Llama-Stack-0.4.0rc3-local-CVE-2026-25211

Llama Stack pgvector パスワード漏洩 PoC CVE-2026-25211 ローカル検証用PoC — llama-stack バージョン 0.4.0rc3 未満 の初期化ログにおける平文データベースパスワード露出を実証します。 概要 影響を受ける llama-stack のバージョン（0.4.0rc3 より前）では、pgvector ベクターストアプロバイダーを使用する際、PostgreSQL データベースのパスワードがサーバーまたはベクターストアの初期化中に平文でログ記録 されます。 この情報は以下に出力されます： stdout / コンソール出力 Docker...

Rocky Linux 9.4 [CIQ] Security Update: pgvector / pgvector-debuginfo / pgvector-debugsource (ciqsa-2026_0563)

The Rocky Linux 9.4 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260563 advisory. This advisory aggregates security fixes for the pgvector SRPM in CIQ LTS 9.4. It addresses 1 CVE: CVE-2025-1094. Tenable has extracted the preceding description...

PT-2026-103998

Name of the Vulnerable Software and Affected Versions pgvector versions prior to 0.8.7 Description An issue in the IVFFlat index build process allows a database user to perform an out-of-bounds write, which can lead to arbitrary code execution. This flaw can be exploited remotely by database user...

Rocky Linux 9.4 [CIQ] Security Update: pgvector / pgvector-debuginfo / pgvector-debugsource Multiple Vulnerabilities (ciqsa-2026_1054)

The Rocky Linux 9.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261054 advisory. This advisory aggregates security fixes for the pgvector SRPM in CIQ LTS 9.4. It addresses 3 CVEs: CVE-2024-10979, CVE-2024-10976, CVE-2024-10978. Tenabl...

Incorrect Authorization

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Incorrect Authorization in the knowledge base delete handler process. An attacker can remove instance-wide configuration managed by administrators by sending a DELETE request to the relevant API endpoint with...

DRUPAL-CONTRIB-2026-134

Update 2026-09-11: Increased risk score to reflect publicly documented methods for developing exploits. This module integrates amazee.ai's AI services into Drupal, including a Postgres/pgvector vector database backend for use with Search API AI Search. The module doesn't sufficiently sanitize...

amazee.ai Private AI Provider - Critical - SQL injection - SA-CONTRIB-2026-134

Update 2026-09-11: Increased risk score to reflect publicly documented methods for developing exploits. This module integrates amazee.ai's AI services into Drupal, including a Postgres/pgvector vector database backend for use with Search API AI Search. The module doesn't sufficiently sanitize...

PT-2026-89236

Name of the Vulnerable Software and Affected Versions amazee.ai Drupal provider versions prior to 1.3.7 amazee.ai Drupal provider versions prior to 1.4.3 Description The module integrates AI services into Drupal, utilizing a Postgres/pgvector vector database backend for Search API AI Search. The...

SUSE CVE-2026-18022

Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit systems are affected...

CVE-2026-18022

A flaw was found in pgvector. An integer wraparound vulnerability exists during the IVFFlat index build process. This flaw allows a database user on a 32-bit system to write data outside of allocated memory buffers. Successful exploitation could lead to arbitrary code execution...

Linux Distros Unpatched Vulnerability : CVE-2026-18022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code...