A flaw was found in pgvector. An authenticated database user can trigger an out-of-bounds write during an Inverted File Flat (IVFFlat) index build operation. This vulnerability may allow the attacker to achieve arbitrary code execution or cause a crash resulting in a denial of service on the database server.
Last checked: 2026-10-02 19:43 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-10-01 19:58 UTC)
Fix evidence last checked: 2026-10-24 01:59 UTC
AlmaLinux 10
ALSA-2026:88360 · Published 2026-10-22
ALSA-2026:88359 · Published 2026-10-22
AlmaLinux 9
ALSA-2026:85814 · Published 2026-10-20
ALSA-2026:85791 · Published 2026-10-20
Oracle Linux 10
ELSA-2026-88360 · Published 2026-10-22
ELSA-2026-88359 · Published 2026-10-22
Oracle Linux 9
ELSA-2026-85814 · Published 2026-10-20
ELSA-2026-85791 · Published 2026-10-20
Red Hat Enterprise Linux 10
RHSA-2026:88360 · Published 2026-10-22
RHSA-2026:88359 · Published 2026-10-22
Red Hat Enterprise Linux 9
RHSA-2026:85814 · Published 2026-10-20
RHSA-2026:85791 · Published 2026-10-20
Rocky Linux 10
RLSA-2026:88360 · Published 2026-10-23
RLSA-2026:88359 · Published 2026-10-23
Rocky Linux 9
RLSA-2026:85814 · Published 2026-10-20
RLSA-2026:85791 · Published 2026-10-20
SUSE Linux Enterprise Server 15 SP6
· Published 2026-10-21
SUSE Linux Enterprise Server 15 SP7
SUSE-SU-2026:4804 · Published 2026-10-21
SUSE Linux Enterprise Server 16
SUSE-SU-2026:24211 · Published 2026-10-09