Cyber Posture

CVE-2026-6475

High

Published: 14 May 2026

Published
14 May 2026
Modified
14 May 2026
KEV Added
—
Patch
—
CVSS Score 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score N/A
Risk Priority 18 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2026-6475 is a high-severity UNIX Symbolic Link (Symlink) Following (CWE-61) vulnerability in Postgresql (inferred from references). Its CVSS base score is 8.8 (High).

Operationally, it is not currently listed in the CISA KEV catalog.

NVD Description

Symlink following in PostgreSQL pg_basebackup plain format and in pg_rewind allows an origin superuser to overwrite local files, e.g. /var/lib/postgres/.bashrc, that hijack the operating system account. It will remain the case that starting the server after these commands implicitly trusts…

more

the origin superuser, due to features like shared_preload_libraries. Hence, the attack has practical implications only if one takes relevant action between these commands and server start, like moving the files to a different VM or snapshotting the VM. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.

Deeper analysisAI

Automated synthesis unavailable for this CVE.

Details

CWE(s)
CWE-61

Affected Products

Postgresql
—
inferred from references and description; NVD did not file a CPE for this CVE

References