← Database

CVE-2026-116327

MEDIUM CVSS: 4.3 Published: 2026-11-12 Modified: 2026-11-12

Description

Exposure of sensitive information in PostgreSQL security_barrier processing allows a database user to infer values hidden by a security_barrier view, via applying a leaky function to a CASE test value or internal parameter that indirectly represents a protected column. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.

Affected Platforms

Unknown

Weakness Type

CWE-862

References