CVE-2026-116325
HIGH
NVD
CVSS Score
8
Severity
HIGH
Published
Nov 12, 2026
Vendor
unknown
Description
SQL injection in PostgreSQL reindexdb allows an object creator to execute arbitrary SQL as the database user running reindexdb, via a crafted index name embedded in the parallel catalog query for --jobs with --index. Within major versions 17-18, minor versions before PostgreSQL 18.7 and 17.12 are affected. Versions before PostgreSQL 17 are unaffected.