PostgreSQL Missing Authorization in CREATE TYPE Vulnerability Allows Query Hijacking

A vulnerability exists in PostgreSQL versions prior to 18.4, 17.10, 16.14, 15.18, and 14.23, where the CREATE TYPE command lacks proper authorization checks. This flaw enables an object creator to intercept and manipulate other queries that rely on the search_path to locate user-defined types, including those defined by extensions. As a result, the targeted queries may execute arbitrary SQL functions specified by the attacker.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of SQL functions, potentially allowing for manipulation of data or database objects.

Remediation

Users can upgrade to PostgreSQL versions 18.4, 17.10, 16.14, 15.18, or 14.23 to address this vulnerability.