Tools AI Risk Radar ai-incident-0122
Incident record
pgvector flaw let database users run code on the server
- Severity
- High
- Status
- Patched
- Type
- Infra Vuln
- Target
- pgvector, the PostgreSQL vector-search extension, before 0.8.7
- Actor
- researcher
- CVE
- CVE-2026-103484
What happened
pgvector, the PostgreSQL extension many retrieval-augmented AI applications use to store and search embeddings, fixed an out-of-bounds write in its IVFFlat index build in version 0.8.7, released on 1 October 2026. CVE-2026-103484, published the same day and scored CVSS 3.1 8.8, says a database user can turn the write into arbitrary code execution.
The CVSS vector rates the attacker as needing only low privileges, a database login, and no user interaction. pgvector 0.8.7 was published on PGXN on 1 October.
Sources
- NVD record CVE-2026-103484nvd.nist.gov/vuln/detail/CVE-2026-103484
- pgvector issue 1036github.com/pgvector/pgvector/issues/1036
- pgvector on PGXNpgxn.org/dist/vector/
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026