CVE-2026-2361 describes a privilege escalation vulnerability in PostgreSQL Anonymizer, affecting versions prior to 3.0.1. An authenticated user with CREATE privileges can gain superuser access by crafting a malicious temporary view that executes code when the anon.get_tablesample_ratio function is called. This high-severity vulnerability (CVSS 8.0) has a complex attack vector but can lead to complete compromise of confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 1, < 3.0.1CPE match | cpe:2.3:a:dalibo:postgresql_anonymizer:*:*:*:*:*:postgresql:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.4 Bluesky, 0.2 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.