Skip to content
Fencer Vulns
high 8.8

CVE-2026-103484 json

pgvector buffer overflow in IVFFlat index build

published 2026-10-01 38 d ago modified 2026-10-02 37 d ago also EUVD-2026-91044

cvss
8.8
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 36%
public exploits
0
none known

Summary

IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution.

Patch / fix

  • n/a pgvector 0.8.7
  • pgvector Debian 14 0.8.7-1

debian advisories DEBIAN-CVE-2026-103484

  • pgaudit RHEL 9 18.0-1.module+el9.8.0+23739+1c42644c
  • postgis RHEL 9 3.6.1-4.module+el9.8.0+24879+1364ef12
  • pgvector RHEL 9 0.8.7-1.module+el9.8.0+25065+515b563e
  • pg_repack RHEL 9 1.5.3-1.module+el9.8.0+23739+1c42644c
  • postgresql RHEL 9 18.6-1.module+el9.8.0+24816+5c11f535
  • postgis-utils RHEL 9 3.6.1-4.module+el9.8.0+24879+1364ef12
  • postgis-client RHEL 9 3.6.1-4.module+el9.8.0+24879+1364ef12
  • postgis-upgrade RHEL 9 3.6.1-4.module+el9.8.0+24879+1364ef12

red hat advisories RHSA-2026:85814RHSA-2026:85791

  • pgvector SLES for SAP 15 SP6, SLES 15 SP6-LTSS, SLE Module for Server Applications 15 SP7 0.8.7-150600.13.12.1
  • postgresql16-pgvector SLES for SAP 15 SP6, SLES 15 SP6-LTSS, SLE Module for Server Applications 15 SP7 0.8.7-150600.13.12.1
  • postgresql17-pgvector SLES for SAP 15 SP6, SLES 15 SP6-LTSS, SLE Module for Server Applications 15 SP7 0.8.7-150600.13.12.1
  • postgresql18-pgvector SLES for SAP 15 SP6, SLES 15 SP6-LTSS, SLE Module for Server Applications 15 SP7 0.8.7-150600.13.12.1
  • pgvector SLES for SAP applications 16.0, SLES 16.0 0.8.7-160000.1.1
  • postgresql13-pgvector SLES for SAP applications 16.0, SLES 16.0 0.8.7-160000.1.1
  • postgresql14-pgvector SLES for SAP applications 16.0, SLES 16.0 0.8.7-160000.1.1
  • postgresql15-pgvector SLES for SAP applications 16.0, SLES 16.0 0.8.7-160000.1.1

suse advisories SUSE-SU-2026:4804-1SUSE-SU-2026:24211-1

  • pgvector openSUSE Leap 16.0 0.8.7-160000.1.1
  • postgresql13-pgvector openSUSE Leap 16.0 0.8.7-160000.1.1
  • postgresql14-pgvector openSUSE Leap 16.0 0.8.7-160000.1.1
  • postgresql15-pgvector openSUSE Leap 16.0 0.8.7-160000.1.1
  • postgresql16-pgvector openSUSE Leap 16.0 0.8.7-160000.1.1
  • postgresql17-pgvector openSUSE Leap 16.0 0.8.7-160000.1.1
  • postgresql18-pgvector openSUSE Leap 16.0 0.8.7-160000.1.1
  • pgvector openSUSE Tumbleweed 0.8.7-1.1

opensuse advisories openSUSE-SU-2026:22065-1openSUSE-SU-2026:12067-1

  • pgvector AlmaLinux 10 0.8.7-1.el10_2
  • postgresql18-pgvector AlmaLinux 10 0.8.7-1.el10_2
  • pgaudit AlmaLinux 9 16.0-1.module_el9.4.0+66+eb9878bc
  • postgis AlmaLinux 9 3.5.3-6.module_el9.8.0+311+c39b793b
  • pgvector AlmaLinux 9 0.8.7-1.module_el9.8.0+324+0cb93d9d
  • pg_repack AlmaLinux 9 1.5.1-1.module_el9.6.0+146+c54fdeca
  • postgresql AlmaLinux 9 16.15-1.module_el9.8.0+311+c39b793b
  • postgis-utils AlmaLinux 9 3.5.3-6.module_el9.8.0+311+c39b793b

almalinux advisories ALSA-2026:88359ALSA-2026:88360ALSA-2026:85791ALSA-2026:85814

  • postgresql16-pgvector Rocky Linux 10 0.8.7-1.el10_2
  • postgresql18-pgvector Rocky Linux 10 0.8.7-1.el10_2
  • pgaudit Rocky Linux 9 16.0-1.module+el9.8.0+40212+d6f50005
  • pgaudit Rocky Linux 9 16.0-1.module+el9.8.0+40159+adcaa225
  • postgis Rocky Linux 9 3.5.3-6.module+el9.8.0+40320+f6f9ed3c
  • pg_repack Rocky Linux 9 1.5.1-1.module+el9.8.0+40212+d6f50005
  • pg_repack Rocky Linux 9 1.5.1-1.module+el9.8.0+40159+adcaa225
  • postgresql Rocky Linux 9 16.15-1.module+el9.8.0+40320+f6f9ed3c

rocky linux advisories RLSA-2026:88359RLSA-2026:88360RLSA-2026:85791RLSA-2026:85814

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2026-103484 updated cvss 8.8

pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build

  • Red Hat Enterprise Linux AppStream (v. 9) pgaudit 16.0-1.module+el9.8.0+24090+8f0ee565, pgaudit 18.0-1.module+el9.8.0+23739+1c42644c, postgis 3.5.3-6.module+el9.8.0+24839+3a67b9ca, postgis 3.6.1-4.module+el9.8.0+24879+1364ef12, pgvector 0.8.7-1.module+el9.8.0+25064+c8e71655, pgvector 0.8.7-1.module+el9.8.0+25065+515b563e, +30 more
    fixed: vendor fix “Restrict schema creation permissions to prevent untrusted database accounts from building indexes, or remove the optional pgvector package if vector indexing is not needed.” RHSA-2026:85791
  • Red Hat Enterprise Linux AppStream (v. 10) pgvector 0.8.7-1.el10_2, postgresql16-pgvector 0.8.7-1.el10_2, postgresql18-pgvector 0.8.7-1.el10_2
    fixed: vendor fix “Restrict schema creation permissions to prevent untrusted database accounts from building indexes, or remove the optional pgvector package if vector indexing is not needed.” RHSA-2026:88359
  • Red Hat Enterprise Linux AppStream EUS (v. 10.0) pgvector 0.8.7-1.el10_0, postgresql16-pgvector 0.8.7-1.el10_0
    fixed: vendor fix “Restrict schema creation permissions to prevent untrusted database accounts from building indexes, or remove the optional pgvector package if vector indexing is not needed.” RHSA-2026:95521
  • Red Hat Enterprise Linux AppStream EUS (v.9.6) pgaudit 16.0-1.module+el9.4.0+20427+07482b8c, pgvector 0.8.7-1.module+el9.6.0+25207+17f809b9, pg_repack 1.5.1-1.module+el9.6.0+22880+6b241eec, postgresql 16.15-1.module+el9.6.0+24915+52fd15c1, postgresql-test 16.15-1.module+el9.6.0+24915+52fd15c1, postgresql-pltcl 16.15-1.module+el9.6.0+24915+52fd15c1, +8 more
    fixed: vendor fix “Restrict schema creation permissions to prevent untrusted database accounts from building indexes, or remove the optional pgvector package if vector indexing is not needed.” RHSA-2026:93460

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
38 d ago

Exploit prediction

0.42% chance of exploitation in the next 30 days, higher than 36% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

  • n/a pgvector

Classification

Weakness
  • CWE-787 Out-of-bounds Write
  • CWE-1284 Improper Validation of Specified Quantity in Input

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.