CVE-2026-14666

A flaw in PostgreSQL allows users to bypass row-level security (RLS) due to incomplete tracking of user role and database ownership changes. Active sessions may continue using cached, outdated security policies, enabling unauthorized read or write access to data. Exploitation requires the attacker to understand the application's specific privilege removal configurations.

This vulnerability in PostgreSQL is of Moderate impact. It allows a low-privileged authenticated user to bypass row-level security policies due to stale cached plans, potentially leading to unauthorized data access or modification. Exploitation requires specific timing and an attacker to understand the application's privilege management and row security policy patterns, making it a complex attack.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, ensure that all active PostgreSQL sessions are terminated or restarted after any changes to role membership, role attributes, or database ownership that affect row-level security policies. This action forces the invalidation of stale cached security policies, preventing unauthorized data access. Note that terminating sessions will disrupt active user connections.