pgvector buffer overflow in IVFFlat index build
Priority MEDIUM 40CWE-1284Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-787 and the CVSS impact.
Summary
IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00423 36th percentileScored 2026-11-07
Fix Fixed pgvector: 0.8.7Red Hat: 6 advisories
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | pgvector | before 0.8.7 | 0.8.7 | Patch available | CNA |
- pgvector Vendor— Affected before 0.8.7 Fixed in 0.8.7 Patch available CNA
Remediation
- Fix · CNA pgvector Fixed in 0.8.7
Red Hat 6 advisories
- RHSA-2026:95521 Released 2026-11-05 · Red Hat rating Importantpostgresql16-pgvector security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) pgvector-0.8.7-1.el10_0, postgresql16-pgvector-0.8.7-1.el10_0
- RHSA-2026:93460 Released 2026-11-02 · Red Hat rating Importantpostgresql:16 security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) pg_repack-1.5.1-1.module+el9.6.0+22880+6b241eec.aarch64::postgresql:16, pg_repack-1.5.1-1.module+el9.6.0+22880+6b241eec.ppc64le::postgresql:16, pg_repack-1.5.1-1.module+el9.6.0+22880+6b241eec.s390x::postgresql:16 +47
- RHSA-2026:88359 Released 2026-10-22 · Red Hat rating Importantpostgresql16-pgvector security update
- Red Hat Enterprise Linux AppStream (v. 10) pgvector-0.8.7-1.el10_2, postgresql16-pgvector-0.8.7-1.el10_2
Show 3 more Red Hat advisories
- RHSA-2026:88360 Released 2026-10-22 · Red Hat rating Importantpostgresql18-pgvector security update
- Red Hat Enterprise Linux AppStream (v. 10) postgresql18-pgvector-0.8.7-1.el10_2
- RHSA-2026:85814 Released 2026-10-20 · Red Hat rating Importantpostgresql:18 security update
- Red Hat Enterprise Linux AppStream (v. 9) pg_repack-1.5.3-1.module+el9.8.0+23739+1c42644c.aarch64::postgresql:18, pg_repack-1.5.3-1.module+el9.8.0+23739+1c42644c.ppc64le::postgresql:18, pg_repack-1.5.3-1.module+el9.8.0+23739+1c42644c.s390x::postgresql:18 +47
- RHSA-2026:85791 Released 2026-10-20 · Red Hat rating Importantpostgresql:16 security update
- Red Hat Enterprise Linux AppStream (v. 9) pg_repack-1.5.1-1.module+el9.8.0+24090+8f0ee565.aarch64::postgresql:16, pg_repack-1.5.1-1.module+el9.8.0+24090+8f0ee565.ppc64le::postgresql:16, pg_repack-1.5.1-1.module+el9.8.0+24090+8f0ee565.s390x::postgresql:16 +47
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux AppStream (v. 10) | Fixed | RHSA-2026:88359, RHSA-2026:88360 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2026:85791, RHSA-2026:85814 |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Fixed | RHSA-2026:95521 |
| Red Hat Enterprise Linux AppStream EUS (v.9.6) | Fixed | RHSA-2026:93460 |
Timeline
- 2026-10-02 Threatist record created from CVE-2026-103484
- 2026-10-03 Alias added: GHSA-pw7q-9788-x566
- 2026-10-13 Affected versions changed · Red Hat
- 2026-10-20 Fix available: RHSA-2026:85791 · Red Hat
- 2026-10-20 Fix available: RHSA-2026:85814 · Red Hat
- 2026-10-20 Fix available: Red Hat Enterprise Linux AppStream (v. 9) · Red Hat
- 2026-10-23 Fix available: RHSA-2026:88360 · Red Hat
- 2026-10-23 Fix available: RHSA-2026:88359 · Red Hat
- 2026-10-23 Fix available: Red Hat Enterprise Linux AppStream (v. 10) · Red Hat
- 2026-11-02 Fix available: RHSA-2026:93460 · Red Hat
- 2026-11-02 Fix available: Red Hat Enterprise Linux AppStream EUS (v.9.6) · Red Hat
- 2026-11-05 Fix available: Red Hat Enterprise Linux AppStream EUS (v. 10.0) · Red Hat
- 2026-11-06 Fix available: RHSA-2026:95521 · Red Hat
References
Sources
- CVE-2026-103484 · CVE Program
- CVE-2026-103484 · NVD
- FIRST EPSS
- GHSA-pw7q-9788-x566 · GitHub Advisory Database · CC BY 4.0
- CVE-2026-103484 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences