Is there a patch available for CVE-2026-50738?

Yes, a patch is available for CVE-2026-50738. Update the affected software to the latest version immediately.

pglogical CVE-2026-50738

Q: What is the CVSS score of CVE-2026-50738?

CVE-2026-50738 has a CVSS 4.0 base score of 7.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

EUVD-2026-49938 HIGH

Use After Free (CWE-416)

2026-07-28 EDB

GHSA-7pcx-4vjw-f9pr

RCE PostgreSQL Use After Free Memory Corruption Pglogical Enterprisedb

7.7

CVSS 4.0 · Vendor: EDB

Severity by source

Vendor (EDB) PRIMARY

7.7 HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.5 HIGH

Network attack, high complexity race condition, low privileges, no UI, complete confidentiality, integrity, and availability impact.

3.1 AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (EDB).

CVSS VectorVendor: EDB

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Patch available

Jul 28, 2026 - 19:02 EUVD

Analysis Generated

Jul 28, 2026 - 18:51 vuln.today

CVE Published

Jul 28, 2026 - 17:55 cve.org

HIGH 7.7

DescriptionCVE.org

A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced after the underlying slot has been freed or recycled during normal worker lifecycle events. The condition is reachable during normal replication operation, including by a low-privileged user able to influence worker start, stop, and restart timing through permitted pglogical operations. In the typical case the condition crashes replication workers, causing an availability impact. In the worst case a use-after-free in a PostgreSQL backend can be leveraged as a remote code execution primitive at the privilege of that backend.

Articles & Coverage 1

News 3 New PostgreSQL Vulnerabilities - 2 Critical, 1 High Jul 29, 2026

AnalysisAI

Remote code execution in pglogical extension for PostgreSQL allows a low-privileged user to crash replication workers, with potential for arbitrary code execution. A use-after-free condition in worker signaling code is triggered during normal replication operations when worker lifecycle events race. While typical effect is denial-of-service, a successful exploit can give complete control of the database backend process.

Technical ContextAI

pglogical is a PostgreSQL extension that implements logical replication using background workers and replication slots. The vulnerability lies in the signaling mechanism that coordinates worker threads; when a worker object is freed or recycled, a stale reference can be dereferenced (CWE-416). The CPE cpe:2.3:a:enterprisedb:pglogical:*:*:*:*:*:*:*:* indicates that all versions are affected. The flaw exists in the PostgreSQL backend process, which runs with the database server’s privileges.

RemediationAI

Upgrade to a patched version of pglogical as soon as available per the EnterpriseDB advisory (https://www.enterprisedb.com/docs/security/advisories/cve202650738/). If immediate patching is not possible, restrict low-privileged user permissions to prevent start/stop/restart of replication workers, or temporarily disable the pglogical extension. Note that disabling may interrupt logical replication. Monitor worker health for unexpected crashes.