Low3.8Red Hat Linux Updated

Low [CVE-2026-14673] PostgreSQL amcheck: Privilege escalation via untrusted search path

This low-severity Red Hat Linux advisory covers CVE-2026-14673 affecting Red Hat Hardened Images.

CVE-2026-14673 Published Aug 13, 2026Updated by vendor Aug 13, 2026

CVE-2026-14673

Monitor future Red Hat Linux CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery

Get CVE alerts See app features

Summary

PostgreSQL amcheck: Privilege escalation via untrusted search path. Red Hat rates this low (CVSS 3.8).

Weakness: CWE-426. Red Hat lists fixing advisory RHSA-2026:54751 with package postgresql18-main-18.6-0.1.hum1, postgresql17-main-17.11-1.hum1.

Affected product named by the advisory: Red Hat Hardened Images.

Affected versions

< 18.5
< 16.15
< 15.19
< 14.24

Official advisory · high-confidence parse· fetched 1 hour ago·verify at source

Fixed versions

postgresql18-main-18.6-0.1.hum1
postgresql17-main-17.11-1.hum1
RHSA-2026:54751

Official advisory · high-confidence parse· fetched 1 hour ago·verify at source

Mitigation checklist

Recommended fix / mitigation

Do not GRANT EXECUTE on amcheck functions (bt_index_check, bt_index_parent_check, verify_heapam, and related) to non-superuser roles. If index verification is unused, drop the extension (DROP EXTENSION amcheck). Restrict PostgreSQL to trusted clients.

Official advisory · high-confidence parse· fetched 1 hour ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.