Vulnerability Description
pgcollection is an open source extension to PostgreSQL. A type confusion issue in AWS pgcollection 2.0.0 through 2.1.1 might allow an authenticated remote user to execute arbitrary code as the postgres operating system user via crafted SQL statements that rely on mismatched type metadata in collection value retrieval and array conversion functions. To remediate this issue, users should upgrade to version 2.1.2 or later.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://aws.amazon.com/security/security-bulletins/2026-118-aws/
- https://github.com/aws/pgcollection/releases/tag/v2.1.2
- https://github.com/aws/pgcollection/security/advisories/GHSA-g539-cj32-hv6r
FAQ
What is CVE-2026-96883?
CVE-2026-96883 is a vulnerability with a CVSS score of 8.8 (HIGH). pgcollection is an open source extension to PostgreSQL. A type confusion issue in AWS pgcollection 2.0.0 through 2.1.1 might allow an authenticated remote user to execute arbitrary code as the postgre...
How severe is CVE-2026-96883?
CVE-2026-96883 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-96883?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.