PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution
PostgreSQL released updates for CVE-2026-6471 (CVSS 7.2), a flaw present since logical decoding arrived in PostgreSQL 9.4 in 2014 that lets an account with the REPLICATION attribute run arbitrary code as the postgres operating-system user. The August 13...