What is the CVSS score of CVE-2026-2360?

CVE-2026-2360 has a CVSS 3.1 base score of 8.0 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of PostgreSQL are affected by CVE-2026-2360?

PostgreSQL Anonymizer contains a privilege escalation vulnerability (CVE-2026-2360) that allows authenticated users to gain superuser access, potentially compromising data confidentiality, integrity,…

How to fix or mitigate CVE-2026-2360?

Within 24 hours: Identify all systems running PostgreSQL Anonymizer and assess user access controls to the public schema. Within 7 days: Implement network segmentation to restrict database access and disable the PostgreSQL Anonymizer extension if operationally feasible, or restrict extension creation permissions to trusted administrators only. Within 30 days: Monitor vendor advisories for patch availability and establish a testing/deployment plan for immediate application upon release.

PostgreSQL CVE-2026-2360

HIGH

Uncontrolled Search Path Element (CWE-427)

2026-02-11 f86ef6dc-4d3a-42ad-8f28-e6d5547a5007

PostgreSQL

8.0

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.0 HIGH

AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:02 vuln.today

CVE Published

Feb 11, 2026 - 18:16 nvd

HIGH 8.0

DescriptionCVE.org

PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a custom operator in the public schema and place malicious code in that operator. This operator will later be executed with superuser privileges when the extension is created. The risk is higher with PostgreSQL 14 or with instances upgraded from PostgreSQL 14 or a prior version. With PostgreSQL 15 and later, the creation permission on the public schema is revoked by default and this exploit can only be achieved if a superuser adds a new schema in her/his own search_path and grants the CREATE privilege on that schema to untrusted users, both actions being clearly discouraged by the PostgreSQL documentation. The problem is resolved in PostgreSQL Anonymizer 3.0.1 and further versions

AnalysisAI

PostgreSQL Anonymizer allows authenticated users to escalate to superuser privileges by injecting malicious code into custom operators placed in the public schema, which execute with elevated privileges during extension creation. This vulnerability primarily affects PostgreSQL 14 and instances upgraded from earlier versions, as PostgreSQL 15+ restricts public schema creation permissions by default. A patch is available in PostgreSQL Anonymizer version 3.0.1 and later.

Technical ContextAI

Classified as CWE-427 (Uncontrolled Search Path Element). PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a custom operator in the public schema and place malicious code in that operator. This operator will later be executed with superuser privileges when the extension is created. The risk is higher with PostgreSQL 14 or with instances upgraded from PostgreSQL 14 or a prior version. With PostgreSQL 15 and later, the creation permission on the public schema is revoked by default and this exploit