Type confusion in Timescale pgvectorscale DiskANN indexes
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- High
- Attack requirements
- Present
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-843 and the CVSS impact.
Summary
Timescale pgvectorscale before 0.9.1 contains a type confusion flaw (CWE-843) that lets low-privileged database users corrupt memory. An attacker with CREATE privilege on the vectorscale schema can pre-create shadow objects that replace pgvector's vector type or operators, then build and query DiskANN indexes over crafted values to cause out-of-bounds reads and writes. This can disclose memory, crash the server, or escalate privileges.
Written with Claude Haiku 5.5 from the sources below · 2026-11-04
Description from the CNA
Timescale pgvectorscale before 0.9.1 contains a type confusion vulnerability that allows low-privileged database users to corrupt memory by shadowing pgvector's vector type or operators. Attackers with CREATE privilege on the vectorscale schema can pre-create shadow objects, then build and query DiskANN indexes over crafted values to cause out-of-bounds reads and writes, disclosing memory, crashing the server, or escalating privileges.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
Remediation
Update pgvectorscale to version 0.9.1 or later. The sources list no fixed version for any other product.
Written with Claude Haiku 5.5 from the sources below · 2026-11-04
- Fix · CNA pgvectorscale (timescale) Fixed in 0.9.1
Timeline
- 2026-10-26 Threatist record created from CVE-2026-116489
- 2026-10-27 Alias added: GHSA-p9m3-8942-gxhh
- 2026-10-27 Priority changed: MEDIUM → LOW
- 2026-11-04 CISA SSVC decision points changed
References
Patch 4
Other 5
- https://github.com/timescale/pgvectorscale/blob/0.9.0/pgvectorscale/src/access_method/mod.rs#L208-L231
- https://github.com/timescale/pgvectorscale/blob/0.9.0/pgvectorscale/src/access_method/pg_vector.rs#L133-L151
- https://github.com/timescale/pgvectorscale/blob/0.9.0/pgvectorscale/src/access_method/build.rs#L253
- pgvectorscale 0.9.1 Release Notes
- https://github.com/timescale/pgvectorscale
More timescale vulnerabilities
- TI-2025-32594 pgai secrets exfiltration via `pull_request_target` CVSS 3.1CRITICAL 9.1
- TI-2023-10611 TimescaleDB has incorrect access control CVSS 3.1HIGH 8.8
- TI-2026-23232 TimescaleDB uses untrusted search path during extension upgrade CVSS 3.1HIGH 8.8
- TI-2022-08073 Timescale TimescaleDB 1.x and 2.x before 2.5.2 may allow privilege escalation during… CVSS 3.1HIGH 8.0
- TI-2026-56062 Timescale tiger-gh-mcp-server DNS Rebinding via Disabled Host Header Allow-List CVSS 4.0HIGH 7.6
- TI-2026-56061 Timescale tiger-slack DNS Rebinding via Disabled Host Header Allow-List CVSS 4.0HIGH 7.6
Sources
- CVE-2026-116489 · CVE Program
- CVE-2026-116489 · NVD
- FIRST EPSS
- GHSA-p9m3-8942-gxhh · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences