CVE-2024-7348

score

<0.1

cvss

8.8

epss

1.6%

published

2024-08-08

kev added

—

first seen

2026-10-21

PostgreSQL < 16.4, 15.8, 14.13, 13.16, 12.20 contains a TOCTOU race condition in pg_dump caused by object replacement, letting attackers execute arbitrary SQL functions as the pg_dump user, exploit requires waiting for pg_dump to start and retaining an open transaction.