CVE-2026-3172
pgvector buffer overflow in parallel HNSW index build
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
pgvector buffer overflow in parallel HNSW index build
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server.
- Record
CVE-2026-3172- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Weakness
- CWE-191, CWE-787
- Updated
- 2026-11-02
EUVDEUVD-2026-8743
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server.
- Record
EUVD-2026-8743- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-789c-mgqf-5hwx
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database...
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server.
- Record
GHSA-789c-mgqf-5hwx- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Weakness
- CWE-191
- Updated
- 2026-11-02
NVD
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server.
- Record
CVE-2026-3172- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Weakness
- CWE-191, CWE-787
- Updated
- 2026-11-02
OSV
pgvector buffer overflow in parallel HNSW index build
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server.
- Record
CVE-2026-3172- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Weakness
- CWE-191, CWE-787
- Updated
- 2026-11-05
OSVDEBIAN-CVE-2026-3172
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server.
- Record
DEBIAN-CVE-2026-3172- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
Show 5 moreShow less
OSVUBUNTU-CVE-2026-3172
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server.
- Record
UBUNTU-CVE-2026-3172- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2026:10409-1 No score
pgvector-devel-0.8.2-1.1 on GA media
These are all security issues fixed in the pgvector-devel-0.8.2-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:10409-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:20489-1 No score
Security update for pgvector
This update for pgvector fixes the following issue:
Update to pgvector 0.8.2:
- CVE-2026-3172: Buffer overflow in parallel HNSW index build (bsc#1258945).
Changelog:
- Fixed Index Searches in EXPLAIN output for Postgres 18
- Record
openSUSE-SU-2026:20489-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:1068-1 No score
Security update for pgvector
This update for pgvector fixes the following issue:
Update to pgvector 0.8.2:
- CVE-2026-3172: Buffer overflow in parallel HNSW index build (bsc#1258945).
Changelog:
- Fixed Index Searches in EXPLAIN output for Postgres 18
- Record
SUSE-SU-2026:1068-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:21153-1 No score
Security update for pgvector
This update for pgvector fixes the following issue:
Update to pgvector 0.8.2:
- CVE-2026-3172: Buffer overflow in parallel HNSW index build (bsc#1258945).
Changelog:
- Fixed Index Searches in EXPLAIN output for Postgres 18
- Record
SUSE-SU-2026:21153-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
pgvectorDebian:13 |
All versions, plus listed versions 0.8.0-10.8.1-10.8.1-20.8.2-10.8.3-10.8.4-10.8.5-10.8.6-1 |
None known |
pgvectorDebian:14 |
before 0.8.2-1, plus listed versions 0.8.0-10.8.1-10.8.1-2 |
0.8.2-1 |
pgvectorSUSE:Linux Enterprise Module for Server Applications 15 SP7 |
before 0.8.2-150600.13.9.1 | 0.8.2-150600.13.9.1 |
postgresql16-pgvectorSUSE:Linux Enterprise Module for Server Applications 15 SP7 |
before 0.8.2-150600.13.9.1 | 0.8.2-150600.13.9.1 |
postgresql17-pgvectorSUSE:Linux Enterprise Module for Server Applications 15 SP7 |
before 0.8.2-150600.13.9.1 | 0.8.2-150600.13.9.1 |
postgresql18-pgvectorSUSE:Linux Enterprise Module for Server Applications 15 SP7 |
before 0.8.2-150600.13.9.1 | 0.8.2-150600.13.9.1 |
pgvectorSUSE:Linux Enterprise Server 15 SP6-LTSS |
before 0.8.2-150600.13.9.1 | 0.8.2-150600.13.9.1 |
postgresql16-pgvectorSUSE:Linux Enterprise Server 15 SP6-LTSS |
before 0.8.2-150600.13.9.1 | 0.8.2-150600.13.9.1 |
postgresql17-pgvectorSUSE:Linux Enterprise Server 15 SP6-LTSS |
before 0.8.2-150600.13.9.1 | 0.8.2-150600.13.9.1 |
postgresql18-pgvectorSUSE:Linux Enterprise Server 15 SP6-LTSS |
before 0.8.2-150600.13.9.1 | 0.8.2-150600.13.9.1 |
Show 37 moreShow less
| Package | Affected | Fixed |
|---|---|---|
pgvectorSUSE:Linux Enterprise Server for SAP Applications 15 SP6 |
before 0.8.2-150600.13.9.1 | 0.8.2-150600.13.9.1 |
postgresql16-pgvectorSUSE:Linux Enterprise Server for SAP Applications 15 SP6 |
before 0.8.2-150600.13.9.1 | 0.8.2-150600.13.9.1 |
postgresql17-pgvectorSUSE:Linux Enterprise Server for SAP Applications 15 SP6 |
before 0.8.2-150600.13.9.1 | 0.8.2-150600.13.9.1 |
postgresql18-pgvectorSUSE:Linux Enterprise Server for SAP Applications 15 SP6 |
before 0.8.2-150600.13.9.1 | 0.8.2-150600.13.9.1 |
pgvectoropenSUSE:Leap 15.6 |
before 0.8.2-150600.13.9.1 | 0.8.2-150600.13.9.1 |
postgresql13-pgvectoropenSUSE:Leap 15.6 |
before 0.8.2-150600.13.9.1 | 0.8.2-150600.13.9.1 |
postgresql14-pgvectoropenSUSE:Leap 15.6 |
before 0.8.2-150600.13.9.1 | 0.8.2-150600.13.9.1 |
postgresql15-pgvectoropenSUSE:Leap 15.6 |
before 0.8.2-150600.13.9.1 | 0.8.2-150600.13.9.1 |
postgresql16-pgvectoropenSUSE:Leap 15.6 |
before 0.8.2-150600.13.9.1 | 0.8.2-150600.13.9.1 |
postgresql17-pgvectoropenSUSE:Leap 15.6 |
before 0.8.2-150600.13.9.1 | 0.8.2-150600.13.9.1 |
postgresql18-pgvectoropenSUSE:Leap 15.6 |
before 0.8.2-150600.13.9.1 | 0.8.2-150600.13.9.1 |
pgvectorSUSE:Linux Enterprise Server 16.0 |
before 0.8.2-160000.1.1 | 0.8.2-160000.1.1 |
postgresql13-pgvectorSUSE:Linux Enterprise Server 16.0 |
before 0.8.2-160000.1.1 | 0.8.2-160000.1.1 |
postgresql14-pgvectorSUSE:Linux Enterprise Server 16.0 |
before 0.8.2-160000.1.1 | 0.8.2-160000.1.1 |
postgresql15-pgvectorSUSE:Linux Enterprise Server 16.0 |
before 0.8.2-160000.1.1 | 0.8.2-160000.1.1 |
postgresql16-pgvectorSUSE:Linux Enterprise Server 16.0 |
before 0.8.2-160000.1.1 | 0.8.2-160000.1.1 |
postgresql17-pgvectorSUSE:Linux Enterprise Server 16.0 |
before 0.8.2-160000.1.1 | 0.8.2-160000.1.1 |
postgresql18-pgvectorSUSE:Linux Enterprise Server 16.0 |
before 0.8.2-160000.1.1 | 0.8.2-160000.1.1 |
pgvectorSUSE:Linux Enterprise Server for SAP applications 16.0 |
before 0.8.2-160000.1.1 | 0.8.2-160000.1.1 |
postgresql13-pgvectorSUSE:Linux Enterprise Server for SAP applications 16.0 |
before 0.8.2-160000.1.1 | 0.8.2-160000.1.1 |
postgresql14-pgvectorSUSE:Linux Enterprise Server for SAP applications 16.0 |
before 0.8.2-160000.1.1 | 0.8.2-160000.1.1 |
postgresql15-pgvectorSUSE:Linux Enterprise Server for SAP applications 16.0 |
before 0.8.2-160000.1.1 | 0.8.2-160000.1.1 |
postgresql16-pgvectorSUSE:Linux Enterprise Server for SAP applications 16.0 |
before 0.8.2-160000.1.1 | 0.8.2-160000.1.1 |
postgresql17-pgvectorSUSE:Linux Enterprise Server for SAP applications 16.0 |
before 0.8.2-160000.1.1 | 0.8.2-160000.1.1 |
postgresql18-pgvectorSUSE:Linux Enterprise Server for SAP applications 16.0 |
before 0.8.2-160000.1.1 | 0.8.2-160000.1.1 |
pgvectorUbuntu:24.04:LTS |
All versions, plus listed versions 0.4.4-10.5.1-10.6.0-1 |
None known |
pgvectorUbuntu:25.10 |
All versions, plus listed versions 0.8.0-1 |
None known |
pgvectorUbuntu:26.10 |
All versions, plus listed versions 0.8.1-20.8.2-10.8.3-10.8.5-10.8.6-1 |
None known |
pgvectorUbuntu:26.04:LTS |
All versions, plus listed versions 0.8.0-10.8.1-2 |
None known |
pgvectoropenSUSE:Tumbleweed |
before 0.8.2-1.1 | 0.8.2-1.1 |
pgvectoropenSUSE:Leap 16.0 |
before 0.8.2-160000.1.1 | 0.8.2-160000.1.1 |
postgresql13-pgvectoropenSUSE:Leap 16.0 |
before 0.8.2-160000.1.1 | 0.8.2-160000.1.1 |
postgresql14-pgvectoropenSUSE:Leap 16.0 |
before 0.8.2-160000.1.1 | 0.8.2-160000.1.1 |
postgresql15-pgvectoropenSUSE:Leap 16.0 |
before 0.8.2-160000.1.1 | 0.8.2-160000.1.1 |
postgresql16-pgvectoropenSUSE:Leap 16.0 |
before 0.8.2-160000.1.1 | 0.8.2-160000.1.1 |
postgresql17-pgvectoropenSUSE:Leap 16.0 |
before 0.8.2-160000.1.1 | 0.8.2-160000.1.1 |
postgresql18-pgvectoropenSUSE:Leap 16.0 |
before 0.8.2-160000.1.1 | 0.8.2-160000.1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-3172 is a high vulnerability (CVSS 8.1) in pgvector, published February 25, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 32nd percentile. Fixed in pgvector 0.8.2-1.
References
github.com/pgvector/pgvector/issues/959
nvd.nist.gov/vuln/detail/CVE-2026-3172
security-tracker.debian.org/tracker/CVE-2026-3172
suse.com/support/update/announcement/2026/suse-su-20261068-1