Vulnerability in Dalibo PostgreSQL Anonymizer

CVE-2026-83534

PostgreSQL Anonymizer contains a vulnerability in the anon.anonymize_database_parallel() function that allows the owner of a table to run arbitrary code with superuser privilege. The issue is fixed in PostgreSQL Anonymizer 3.2.0 and later versions

CVSS v3 metric

CVSS v3 base score 6.4 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2026-83534?
CVE-2026-83534 is a medium-severity vulnerability in Dalibo PostgreSQL Anonymizer, classified under CWE-250. CVSS score: 6.4/10. Published 2026-09-06.
How severe is CVE-2026-83534?
Medium severity. CVSS v3 base score is 6.4 out of 10.