Skip to content
OpenAdvisories
High · 7.1 CVE-2026-18893 EUVD-2026-119705GHSA-hjfm-xqgq-5qjr

CockroachDB PostgreSQL for IBM VPC is affected by multiple vulnerabilities

Published Nov 8, 2026 · Updated Nov 9, 2026 · Assigned by ibm

Vendor: IBM Product: CockroachDB PostgreSQL for IBM VPC

Description

IBM CockroachDB PostgreSQL for IBM VPC 26.2.0 through 26.2.3, 25.4.0 through 25.4.12, and 25.2.0 through 25.2.20 is vulnerable to privilege escalation via user-defined function.

Affected products

VendorProductAffectedFixed
IBM CockroachDB PostgreSQL for IBM VPC 26.2.0 – ≤ 26.2.3, 25.4.0 – ≤ 25.4.12, 25.2.0 – ≤ 25.2.20 —

References