CVE-2026-119922

Summary

Improper access control in Babelfish for PostgreSQL allows authenticated low-privilege users to escalate privileges due to insufficient authorization checks in versions 1.2–1.5, 2.1–2.15, 3.1–3.12, 4.0–4.8, and 5.1–5.4.

Exploitability

Exploitation requires valid authentication as a low-privilege user; no additional conditions or complex steps are needed beyond standard login.

Blast radius

Successful exploitation grants elevated privileges, enabling full compromise of confidentiality, integrity, and availability of the PostgreSQL instance.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Babelfish for PostgreSQL extension versions 4.10, 5.6, or 6.1 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.