CVE Intelligence

Pgvector Project vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Pgvector Project products: 1 record(s), with severity, exploitation and fixes.

Pgvector 1

Exploited only (KEV) →

CVE-2026-18022 High · 8.8 CWE-190 Jul 29, 2026
pgvector buffer overflow via integer wraparound in IVFFlat index build on 32-bit systems
Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit systems are affected.