CVE-2026-13455

Published Jun 30, 2026

Last updated 21 days ago

CVSS medium 4.3

Overview

Description: PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to repeatedly call the anon.hash() function and collects (seed, hash_output) pairs to perform an offline brute-force attack and deduce the salt. The problem is resolved in PostgreSQL Anonymizer 3.1.2 and later versions
Source: f86ef6dc-4d3a-42ad-8f28-e6d5547a5007
NVD status: Analyzed
Products: postgresql_anonymizer

Risk scores

CVSS 3.1

Type: Secondary
Base score: 4.3
Impact score: 1.4
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Severity: MEDIUM

Weaknesses

f86ef6dc-4d3a-42ad-8f28-e6d5547a5007: CWE-328

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:dalibo:postgresql_anonymizer:*:*:*:*:*:postgresql:*:*",
            "matchCriteriaId": "2CBA3A66-8F34-4EA5-9C5F-FEDDE5689BD0",
            "versionEndIncluding": "3.1.2",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a JSON document and placing malicious code inside a particular key-value pair. If a superuser calls the import_database_rules() or import_roles_rules() functions, the malicious code is executed with superuser privileges. The problem is resolved in PostgreSQL Anonymizer 3.1.1 and further versions•CVE-2026-11945

References

Sources include official advisories and independent security research.

Overview

Risk scores

CVSS 3.1

Weaknesses

Social media

Configurations

Related CVEs

References