What is CVE-2026-6464?

CVE-2026-6464 is a high-severity vulnerability in Postgresql, classified under Inclusion of Functionality from Untrusted Control Sphere. CVSS score: 8.1/10. Published 2026-08-13.

How severe is CVE-2026-6464?

High severity. CVSS v3 base score is 8.1 out of 10.

Vulnerability in Postgresql

CVE-2026-6464

Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If the "COPY FROM STDIN" or "\copy FROM STDIN" command fails before the server indi…

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

N/a Postgresql — versions 18, 17, 16

Weakness classification (CWE)

CWE-829 — Inclusion of Functionality from Untrusted Control Sphere

References

f86ef6dc-4d3a-42ad-8f28-e6d5547a5007

Frequently asked questions

What is CVE-2026-6464?: CVE-2026-6464 is a high-severity vulnerability in Postgresql, classified under Inclusion of Functionality from Untrusted Control Sphere. CVSS score: 8.1/10. Published 2026-08-13.
How severe is CVE-2026-6464?: High severity. CVSS v3 base score is 8.1 out of 10.