CVE-2026-103484

Summary

This flaw allows a database user to write data out-of-bounds in the IVFFlat index build process, potentially leading to arbitrary code execution. This is significant because it can enable attackers to gain full control over the database system.

Exploitability

Exploitation requires a user with database write permissions and knowledge of the affected version. The attacker must trigger the IVFFlat index build process.

Blast radius

If exploited, the impact could be severe, as it allows arbitrary code execution, potentially leading to full system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to pgvector 0.8.7 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.