Vulnerability · Published Aug 13, 2026 · Assigned by PostgreSQL
CVE-2026-6469PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership
Low 3.8
In plain English
A low-severity security flaw in PostgreSQL. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
Incorrect ownership assignment in PostgreSQL ALTER TABLE ALTER TYPE command reassigns ownership of dependent statistics objects to the current user. This wrongly allows the table owner to run DROP STATISTICS and ALTER STATISTICS via this improper ownership. It wrongly denies those commands to the prior statistics object owner. DROP TABLE remains able to remove statistics objects, so this exploit achieves nothing in many ownership arrangements. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine:v3.21 | postgresql15 | 15.19-r0 | ALPINE-CVE-2026-6469 |
| Alpine:v3.22 | postgresql15 | 15.19-r0 | ALPINE-CVE-2026-6469 |
| Alpine:v3.21 | postgresql16 | 16.15-r0 | ALPINE-CVE-2026-6469 |
| Alpine:v3.22 | postgresql16 | 16.15-r0 | ALPINE-CVE-2026-6469 |
| Alpine:v3.23 | postgresql16 | 16.15-r0 | ALPINE-CVE-2026-6469 |
| Alpine:v3.24 | postgresql16 | 16.15-r0 | ALPINE-CVE-2026-6469 |
| Alpine:v3.21 | postgresql17 | 17.11-r0 | ALPINE-CVE-2026-6469 |
| Alpine:v3.22 | postgresql17 | 17.11-r0 | ALPINE-CVE-2026-6469 |
| Alpine:v3.23 | postgresql17 | 17.11-r0 | ALPINE-CVE-2026-6469 |
| Alpine:v3.24 | postgresql17 | 17.11-r0 | ALPINE-CVE-2026-6469 |
| Alpine:v3.23 | postgresql18 | 18.5-r0 | ALPINE-CVE-2026-6469 |
| Alpine:v3.24 | postgresql18 | 18.5-r0 | ALPINE-CVE-2026-6469 |
| Debian:12 | postgresql-15 | 15.19-0+deb12u1 | DEBIAN-CVE-2026-6469 |
| Debian:13 | postgresql-17 | 17.11-0+deb13u1 | DEBIAN-CVE-2026-6469 |
| Debian:14 | postgresql-18 | 18.6-1 | DEBIAN-CVE-2026-6469 |
| Ubuntu:22.04:LTS | postgresql-14 | 14.24-0ubuntu0.22.04.1 | USN-8653-1 |
| Ubuntu:22.04:LTS | postgresql-14 | 14.24-0ubuntu0.22.04.1 | UBUNTU-CVE-2026-6469 |
| Ubuntu:24.04:LTS | postgresql-16 | 16.15-0ubuntu0.24.04.1 | USN-8653-1 |
| Ubuntu:24.04:LTS | postgresql-16 | 16.15-0ubuntu0.24.04.1 | UBUNTU-CVE-2026-6469 |
| Ubuntu:26.04:LTS | postgresql-18 | 18.6-0ubuntu0.26.04.1 | USN-8653-1 |
| Ubuntu:26.04:LTS | postgresql-18 | 18.6-0ubuntu0.26.04.1 | UBUNTU-CVE-2026-6469 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | PostgreSQL | 18 – before 18.617 – before 17.1116 – before 16.1515 – before 15.190 – before 14.24 |
Weakness: CWE-708 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L