CVE-2021-33204

CVE-2021-33204 is a critical arbitrary code execution vulnerability affecting the pg_partman extension for PostgreSQL, specifically versions prior to 4.5.1. The flaw stems from the extension's SECURITY DEFINER functions not explicitly setting a search_path, allowing an attacker to execute arbitrary code. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network with low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or publicly available exploit code, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.