CVE-2024-10978

score

<0.1

cvss

4.2

epss

0.7%

published

2024-11-14

kev added

—

first seen

2026-10-21

PostgreSQL versions before 12.21, 13.17, 14.14, 15.9, 16.5, and 17.1 contain an incorrect privilege assignment caused by improper handling of role switching commands, letting less-privileged users access or modify data beyond their permissions, exploit requires use of SET ROLE or SET SESSION AUTHORIZATION.