CVE-2026-116489
Received Received - Intake

Type Confusion in pgvectorscale Memory Corruption

Publication date: 2026-10-26

Last updated on: 2026-10-26

Assigner: VulnCheck

Description
Timescale pgvectorscale before 0.9.1 contains a type confusion vulnerability that allows low-privileged database users to corrupt memory by shadowing pgvector's vector type or operators. Attackers with CREATE privilege on the vectorscale schema can pre-create shadow objects, then build and query DiskANN indexes over crafted values to cause out-of-bounds reads and writes, disclosing memory, crashing the server, or escalating privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-26
Last Modified
2026-10-26
Generated
2026-10-26
AI Q&A
2026-10-26
EPSS Evaluated
N/A
NVD
CVE-2026-116489
EUVD
EUVD-2026-109907

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
timescale pgvectorscale 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-843 The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Timescale pgvectorscale before 0.9.1 has a type confusion flaw where low-privileged users can corrupt memory by creating shadow objects that mimic pgvector's vector type or operators. Attackers with CREATE privilege on the vectorscale schema can build DiskANN indexes with crafted values, leading to out-of-bounds memory access, crashes, or privilege escalation.

Impact Analysis

This vulnerability allows attackers to read sensitive memory, crash the database server, or gain higher privileges than intended. If exploited, it could lead to data leaks, service disruption, or unauthorized access to system resources.

Compliance Impact

This vulnerability could lead to unauthorized data access or disclosure, violating GDPR's data protection requirements or HIPAA's safeguards for protected health information. Compliance may be compromised if sensitive data is exposed or altered due to exploitation.

Mitigation Strategies

Upgrade Timescale pgvectorscale to version 0.9.1 or later to address the type confusion vulnerability. Ensure only trusted users have CREATE privileges on the vectorscale schema to prevent exploitation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-116489. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart