Vulnerability Details CVE-2026-105615
PostgreSQL's optimized statistics on a table are visible as long as you have SELECT privilege on said table. A masked role can therefore read a limited subset of the data through the statistics view's histograms and mcvs. The vulnerability is resolved in PostgreSQL Anonymizer 3.3.0 and later versions.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 3.7%
CVSS Severity
CVSS v3 Score 3.5