CVE-2026-83534
Description
A flaw was found in PostgreSQL Anonymizer. This vulnerability, located in the anon.anonymize_database_parallel() function, allows an authenticated table owner to execute arbitrary code with superuser privileges. This could lead to a complete compromise of the database system.
Statement
Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.
Mitigation
If the PostgreSQL Anonymizer extension is not required, remove the postgresql-anonymizer package to eliminate the vulnerability. For example:
bashIf the extension is necessary, ensure that PostgreSQL database role privileges are configured to restrict the execution of the anon.anonymize_database_parallel() function to only trusted superusers, preventing non-superuser table owners from escalating privileges.
sudo dnf remove postgresql-anonymizer
Understanding the Weakness (CWE)
Confidentiality,Integrity,Availability,Access Control
Technical Impact: Gain Privileges or Assume Identity; Execute Unauthorized Code or Commands; Read Application Data; DoS: Crash, Exit, or Restart
An attacker will be able to gain access to any resources that are allowed by the extra privileges. Common results include executing code, disabling services, and reading restricted data. New weaknesses can be exposed because running with extra privileges, such as root or Administrator, can disable the normal security checks being performed by the operating system or surrounding environment. Other pre-existing weaknesses can turn into security vulnerabilities if they occur while operating at raised privileges.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
