CVE-2026-110181

EUVD-2026-112294
PostgreSQL Anonymizer contains a vulnerability related to anonymization functions defined using SQL-standard function bodies. PostgreSQL analyses such functions at declaration time, while Anonymizer only attempts to check them at execution time. This problem can be exploited by any user with the TEMPORARY privilege. The issue is fixed in PostgreSQL Anonymizer 3.3.0 and later versions.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
PostgreSQLCNA
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
dalibopostgresql_anonymizer
𝑥
< 3.3.0
CNA
Common Weakness Enumeration
References
https://gitlab.com/dalibo/postgresql_anonymizer/-/issues/718