PostgreSQL Untrusted Data Injection in pg_dump Allows Arbitrary Code Execution via psql Meta-Commands

A vulnerability exists in PostgreSQL's pg_dump utility, affecting versions prior to 17.6, 16.10, 15.14, 14.19, and 13.22. This vulnerability allows a malicious superuser on the origin server to inject arbitrary code that is executed during the restoration process, using the client's operating system account that runs psql. The issue also affects pg_dumpall and pg_restore when generating a plain-format dump. This vulnerability is similar to MySQL's CVE-2024-21096.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of arbitrary code on the client's operating system during the restoration of the database dump.

Remediation

Users can upgrade to PostgreSQL versions 17.6, 16.10, 15.14, 14.19, or 13.22 to address this vulnerability.