CVE-2026-116332 PostgreSQL portal setup use-after-free executes arbitrary code

This vulnerability is rated as Important severity because an authenticated database user with privileges to create objects can execute arbitrary commands on the host operating system under the PostgreSQL service account. On typical Red Hat Enterprise Linux deployments, database instances are restricted to authorized applications and users, limiting immediate exposure. However, in shared or multi-tenant database environments where non-administrative users are granted rights to define custom routines, this flaw allows complete breakout from SQL execution contexts into the underlying host environment. While the prerequisite of having database credentials and object creation permissions reduces widespread automated exposure, the severe consequence of arbitrary code execution justifies an Important rather than Moderate rating.

Restrict network access to trusted management hosts and revoke object creation privileges from non-administrative users:

1. Limit network access to the PostgreSQL service using firewalld to permit only trusted IP addresses:

```

firewall-cmd --permanent --zone=trusted --add-source=<trusted_ip_or_subnet>

firewall-cmd --permanent --zone=public --remove-port=5432/tcp

firewall-cmd --reload

```

2. Revoke permissions from untrusted roles to create objects and functions within database schemas:

```

REVOKE CREATE ON SCHEMA public FROM PUBLIC;

```

Caveats: Restricting network traffic prevents external clients outside allowlisted subnets from accessing database services. Revoking schema creation privileges prevents non-administrative users from defining custom objects or tables until administrative approval is granted.

Warning: Modifying firewall configurations or reloading firewall rules can disrupt active database network connections.