CVE WatchAug 29, 2026

CVE-2026-6469

Incorrect ownership assignment in PostgreSQL ALTER TABLE ALTER TYPE command reassigns ownership of dependent statistics objects to the curre

CVSS

3.8

Low

EPSS

0.3%

p23

KEV

—

Exploit Today

0-100

Published: Aug 13, 2026 · Last modified: Aug 29, 2026 · CWE-708

EPSS · 30d

0.2%EPSS · 30 days0.3%

2026-09-232026-10-20

Technical description

Incorrect ownership assignment in PostgreSQL ALTER TABLE ALTER TYPE command reassigns ownership of dependent statistics objects to the current user. This wrongly allows the table owner to run DROP STATISTICS and ALTER STATISTICS via this improper ownership. It wrongly denies those commands to the prior statistics object owner. DROP TABLE remains able to remove statistics objects, so this exploit achieves nothing in many ownership arrangements. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.

Official references

www.postgresql.orghttps://www.postgresql.org/support/security/CVE-2026-6469/

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-1104524.0 MED

2.4%

——1The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user (who invoked the installer) even though it should be root ownership.5d CVE-2025-54673.3 LOW

6.6%

——2It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash files with incorrect group ownership, possibly exposing crash information beyond expected or intended groups.7d CVE-2025-142624.3 MED

7.2%

——2A wrong permission check in KNIME Business Hub before version 1.17.0 allowed an authenticated user to save jobs of other users as if there were saved by the job owner. The attacker must have permissions to access the jobs but then they were saved into the catalog service using the wrong owner permissions. Therefore it may have been possible to save into spaces where the attacker does not have write permissions. There is no workaround.14d CVE-2025-50693.5 LOW

15.3%

——5An issue has been discovered in GitLab CE/EE affecting all versions from 17.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could have allowed an authenticated user to gain unauthorized access to confidential issues by creating a project with an identical name to the victim's project.3d