CVE-2026-83534

MEDIUMCVSS 6.4

Description

PostgreSQL Anonymizer contains a vulnerability in the anon.anonymize_database_parallel() function that allows the owner of a table to run arbitrary code with superuser privilege. The issue is fixed in PostgreSQL Anonymizer 3.2.0 and later versions

Timeline

Published:September 6th, 2026 4:16 PM

Last modified:September 6th, 2026 4:16 PM

CVSS Scoring

CVSS v3: 6.4 (MEDIUM)

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-250

References & Reports

Advisories, patches, and third-party reports

https://gitlab.com/dalibo/postgresql_anonymizer/-/issues/666

Source: NIST NVD · Data may lag official sources by up to one minute