Is CVE-2026-119922 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-119922?

CVE-2026-119922 has a CVSS v3 severity of HIGH (8.8).

Back

CVE-2026-119922

Description

Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 may allow remote authenticated users to elevate their privileges. To remediate this issue, we recommend you upgrade to Babelfish for PostgreSQL extension versions 4.10, 5.6, 6.1 or later.