CVE-2012-0866

CVE-2012-0866 describes a privilege escalation vulnerability in PostgreSQL versions 8.3.x, 8.4.x, 9.0.x, and 9.1.x. The flaw allows remote authenticated users to bypass execute permission checks for SECURITY DEFINER trigger functions, enabling them to execute restricted triggers on arbitrary data by attaching them to tables they own. With a CVSS score of 6.5, this vulnerability has a network attack vector, low attack complexity, and can lead to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.