CVE-2026-6575

A flaw was found in PostgreSQL. This buffer over-read vulnerability in the pg_restore_attribute_stats() function allows a table maintainer to infer memory values. By providing array values of unmatched length, a malicious table maintainer can cause query planning to read past the end of an array, leading to information disclosure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this information disclosure vulnerability, restrict network access to the PostgreSQL server to only trusted clients. Configure firewall rules to limit inbound connections to the PostgreSQL port (default 5432) from authorized hosts only. For example, using firewall-cmd on Red Hat Enterprise Linux:

sudo firewall-cmd --permanent --add-source=<TRUSTED_IP_ADDRESS>/32 --zone=public sudo firewall-cmd --permanent --add-port=5432/tcp --zone=public sudo firewall-cmd --reload

Alternatively, configure PostgreSQL to listen only on the localhost interface by setting listen_addresses = 'localhost' in postgresql.conf and restarting the PostgreSQL service.

sudo systemctl restart postgresql

This reduces the attack surface by preventing unauthorized network access to the database. Note that restarting the PostgreSQL service will temporarily interrupt database operations.