CVE-2023-5870

score

<0.1

cvss

2.2

epss

2.6%

published

2023-12-10

kev added

—

first seen

2026-10-21

PostgreSQL contains a flaw involving the pg_cancel_backend role that signals background workers, including the logical replication launcher and autovacuum workers, letting a high privileged user cause a denial of service, exploit requires a non-core extension with a less-resilient background worker.