CVE-2026-83534
Received Received - Intake

PostgreSQL Anonymizer Privilege Escalation via Arbitrary Code Execution

Publication date: 2026-09-06

Last updated on: 2026-09-06

Assigner: PostgreSQL

Description
PostgreSQL Anonymizer contains a vulnerability in the anon.anonymize_database_parallel() function that allows the owner of a table to run arbitrary code with superuser privilege. The issue is fixed in PostgreSQL Anonymizer 3.2.0 and later versions

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-06
Last Modified
2026-09-06
Generated
2026-09-06
AI Q&A
2026-09-06
EPSS Evaluated
N/A
NVD
CVE-2026-83534
EUVD
EUVD-2026-72143

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
postgresql_anonymizer postgresql_anonymizer 3.2.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-250 The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

PostgreSQL Anonymizer has a flaw in the anon.anonymize_database_parallel() function. A table owner can exploit this to run arbitrary code with superuser privileges. The issue was fixed in version 3.2.0 and later.

Detection Guidance

To detect this vulnerability, check the version of PostgreSQL Anonymizer installed on your system. If it is below 3.2.0, the system is vulnerable. Run the command 'SELECT extversion FROM pg_extension WHERE extname = "anon";' in PostgreSQL to check the installed version.

Impact Analysis

If you use PostgreSQL Anonymizer versions before 3.2.0, an attacker with table ownership could gain full control over your database. This could lead to data theft, manipulation, or system compromise.

Compliance Impact

This vulnerability could violate compliance requirements like GDPR or HIPAA by allowing unauthorized access to sensitive data. Organizations using affected versions may face legal penalties or data breach notifications.

Mitigation Strategies

Update PostgreSQL Anonymizer to version 3.2.0 or later to address the vulnerability in the anon.anonymize_database_parallel() function.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-83534. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart