Red Hat Security Advisory

RHSA-2026:88359

postgresql16-pgvector security update

Released 2026-10-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) pgvector-0.8.7-1.el10_2, postgresql16-pgvector-0.8.7-1.el10_2

TI-2026-65706 CVE-2026-103484 · GHSA-pw7q-9788-x566

MEDIUM 40

IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00423 Published 2026-10-01 Fixed in 0.8.7 CWE-1284