CVE-2026-116330

A flaw was found in PostgreSQL. When backing up a database using the pgdump utility with tar-format archives, the generated restore script uses a predictable restriction key. A compromised or malicious database server can exploit this flaw by injecting untrusted data, leading to arbitrary code...

CVE-2026-116330

Untrusted data inclusion in PostgreSQL pgdump tar-format restore.sql allows a compromised origin server to execute arbitrary code as the client operating system account running psql, via the predictable restriction key in restore.sql. This is a gap in the fix for CVE-2025-8714. restore.sql is...

CVE-2026-116330 PostgreSQL pg_dump tar restore.sql fails to block psql command injection

Untrusted data inclusion in PostgreSQL pgdump tar-format restore.sql allows a compromised origin server to execute arbitrary code as the client operating system account running psql, via the predictable restriction key in restore.sql. This is a gap in the fix for CVE-2025-8714. restore.sql is...

CVE-2026-116330

Untrusted data inclusion in PostgreSQL pgdump tar-format restore.sql allows a compromised origin server to execute arbitrary code as the client operating system account running psql, via the predictable restriction key in restore.sql. This is a gap in the fix for CVE-2025-8714. restore.sql is...

EUVD-2026-124509

Untrusted data inclusion in PostgreSQL pgdump tar-format restore.sql allows a compromised origin server to execute arbitrary code as the client operating system account running psql, via the predictable restriction key in restore.sql. This is a gap in the fix for CVE-2025-8714. restore.sql is...

CVE-2026-116330

PostgreSQL versions prior to 18.7, 17.12, 16.16, 15.20, and 14.25 are vulnerable to a psql command injection via the undocumented restore.sql file. The issue stems from the inclusion of untrusted data in the pg_dump tar-format, where a predictable restriction key allows a compromised origin serve...

PT-2026-145820

Untrusted data inclusion in PostgreSQL pg dump tar-format restore.sql allows a compromised origin server to execute arbitrary code as the client operating system account running psql, via the predictable restriction key in restore.sql. This is a gap in the fix for CVE-2025-8714. restore.sql is...

CVE-2026-116330: n/a PostgreSQL: Untrusted data inclusion in PostgreSQL pg_dump tar-format restore.sql allows a compromised origin server to execute…

Untrusted data inclusion in PostgreSQL pgdump tar-format restore.sql allows a compromised origin server to execute arbitrary code as the client operating system account running psql, via the predictable restriction key in restore.sql. This is a gap in the fix for CVE-2025-8714. restore.sql is...

Vulnerability in client (CVE-2026-116330)

PostgreSQL pgdump tar restore.sql fails to block psql command injection Untrusted data inclusion in PostgreSQL pgdump tar-format restore.sql allows a compromised origin server to execute arbitrary code as the client operating system account running psql, via the predictable restriction key in...