CVE-2026-105617
CVE-2026-105617 · PostgreSQL Anonymizer: Cached plans bypass transparent dynamic masking after a role change or a new masking rule
This page contains facts from public vulnerability sources. Check the original advisory before updating.
PostgreSQL Anonymizer doesn't invalidate plans prepared after a rule was added or a role changed. Users using such plans can still see the unmasked data until the end of the session. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions.
CVSS 5.7 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
postgresql anonymizer
- Versions
- ≥ 1, < 3.3.0: Affected (semver)
Update to 3.3.0