PostGREShell: The 'Backup' Account That Opens Every Door in PostgreSQL (CVE-2026-6471)
A missing authorization check on the logical-decoding path means any account with REPLICATION can dlopen an arbitrary file as the postgres OS user — 12 years old, fixed this month, and not even on KEV yet. Fix your box tonight.
High severity, 3 of 4. Patch at your next window. Real impact, real exposure.CVSS 7.2CVE-2026-6471 +1
postgresqlcve-2026-6471postgreshell