CVE-2026-6475 | PostgreSQL up to 18.3 .bashrc shared_preload_libraries symlink

A vulnerability was found in PostgreSQL up to 14.22/15.17/16.13/17.9/18.3 and classified as critical. This impacts the function shared_preload_libraries in the library /var/lib/postgres/.bashrc. Such manipulation leads to symlink following.

This vulnerability is listed as CVE-2026-6475. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.