Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution.
CVSS 3.1HIGH 8.8·Network·Low privileges·No interaction·EPSS 0.00601·Published 2026-07-29·Fixed in 0.8.6CWE-190