CVE-2026-103484

Summary

IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution.

Affected Software

VendorProductVersion RangeStatus
n/apgvector0 < 0.8.7affected

Weaknesses

  • CWE-787: Out-of-bounds Write
  • CWE-1284: Improper Validation of Specified Quantity in Input

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References