CyberRota Analysis
AI-GeneratedPostgreSQL amcheck is vulnerable due to an untrusted search path that allows users with EXECUTE privileges to execute arbitrary functions as the owners of dependent expression indexes by manipulating the search path. This could lead to unauthorized actions or data exposure within the database. Organizations using affected versions (prior to 18.5, 16.15, 15.19, and 14.24) should prioritize patching to mitigate potential risks.
Original NVD Description
Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE privilege to execute arbitrary functions as the owners of expression indexes that depend on the search path, via setting a hostile search path before calling the amcheck function. Within major versions 18, 16, 15, and 14, minor versions before PostgreSQL 18.5, 16.15, 15.19, and 14.24 are affected. PostgreSQL 17 is unaffected.