A flaw was found in pgvector. An authenticated database user can trigger an out-of-bounds write during an Inverted File Flat (IVFFlat) index build operation. This vulnerability may allow the attacker to achieve arbitrary code execution or cause a crash resulting in a denial of service on the database server.
Last checked: 2026-10-02 19:43 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-10-01 19:58 UTC)
Fix evidence last checked: 2026-10-02 10:20 UTC