Back to all news
Security

PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution

The Hacker News·September 4, 2026·1 min read
PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution

PostgreSQL has released updates to fix a 12-year-old flaw, CVE-2026-6471 (CVSS 7.2), allowing accounts with the REPLICATION attribute to run arbitrary code as the OS user. The issue has existed since logical decoding was introduced in version 9.4 in 2014.

Read at The Hacker News
Daily crypto arcade

Read the news, then play it.

Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.

Open ChainshortsGet it on the Solana dApp Store