CyberRota Analysis
AI-GeneratedPostgreSQL versions prior to 18.5, 17.11, 16.15, 15.19, and 14.24 are vulnerable to an untrusted data inclusion flaw in pg_dump, allowing a malicious superuser to inject arbitrary code that executes during the restoration process with the privileges of the client operating system account. This vulnerability poses a significant risk as it can lead to unauthorized code execution, potentially compromising the integrity and security of the database environment. Organizations using affected versions should prioritize patching to mitigate this high-severity risk.
Original NVD Description
Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql \restrict meta-command input expansion. The fix for CVE-2025-8714 introduced \restrict and \unrestrict to block this attack, but \unrestrict itself was sufficient for an attack. pg_dumpall is also affected. pg_restore is affected when used to generate a plain-format dump. Non-core use of \restrict would be affected, but we've not identified non-core use. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.