Skip to content
OpenAdvisories
Medium · 6.4 CVE-2026-83534 EUVD-2026-72143GHSA-j8qw-c658-vr9r

PostgreSQL Anonymizer: Privilege escalation to superuser via anon.anonymize_database_parallel()

Published Sep 6, 2026 · Updated Sep 9, 2026 · Assigned by PostgreSQL

Description

PostgreSQL Anonymizer contains a vulnerability in the anon.anonymize_database_parallel() function that allows the owner of a table to run arbitrary code with superuser privilege. The issue is fixed in PostgreSQL Anonymizer 3.2.0 and later versions

Affected products

VendorProductAffectedFixed
DALIBO PostgreSQL Anonymizer 1 – < 3.2.0 3.2.0

References