CVE-2026-116303 | PostgreSQL up to 18.6 Type Conversion to_json improper authorization

November 12, 2026 Yanac

A vulnerability described as problematic has been identified in PostgreSQL up to 14.24/15.19/16.15/17.11/18.6. This affects the function to_json of the component Type Conversion. Executing a manipulation can lead to improper authorization.

This vulnerability appears as CVE-2026-116303. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More