CVE-2026-50738 Details
Description
A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced after the underlying slot has been freed or recycled during normal worker lifecycle events. The condition is reachable during normal replication operation, including by a low-privileged user able to influence worker start, stop, and restart timing through permitted pglogical operations. In the typical case the condition crashes replication workers, causing an availability impact. In the worst case a use-after-free in a PostgreSQL backend can be leveraged as a remote code execution primitive at the privilege of that backend.
A use-after-free vulnerability has been identified in the pglogical replication extension for PostgreSQL. This issue arises in the worker signaling code, where a worker structure can be accessed after its associated slot has been freed or reused during regular worker lifecycle events. The vulnerability can be triggered during normal replication operations by a low-privileged user who can manipulate the timing of worker start, stop, and restart actions through allowed pglogical commands. Typically, this vulnerability causes replication workers to crash, leading to availability issues. However, in more severe cases, a use-after-free error in a PostgreSQL backend could be exploited to execute remote code with the same privileges as that backend.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 28, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.enterprisedb.com/docs/security/advisories/cve202650738/ | EnterpriseDB Corporation | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-416 | Use After Free | EnterpriseDB Corporation |
Affected Products
| Product | Versions |
|---|---|
| enterprisedb pglogical | >= 2.0.0, < 2.4.8 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 24, 2026 | Initial Analysis | [email protected] |
| Jul 28, 2026 | New CVE Received | EnterpriseDB Corporation |
| Jul 28, 2026 | CVE Modified | CISA-ADP |