Investigate in your agent.

Turn this advisory into a focused investigation. Ask your agent to check your project’s versions, explain the evidence, and suggest a compatible fix.

Your agent needs remote MCP support and access to https://cve.new/mcp.

Read the setup guide

Skip to content
cve.new Create a CVE report
Check your stack
CVE-2026-116489high7.7

Timescale pgvectorscale before 0.9.1 Type Confusion via Unqualified DiskANN Operator Classes

Impact

Timescale pgvectorscale before 0.9.1 has a type confusion vulnerability, allowing low-privileged database users with CREATE privilege to corrupt memory. This can disclose memory, crash the server, or escalate privileges. Attackers can exploit this by pre-creating shadow objects and building DiskANN indexes over crafted values.

Summarized by @cf/meta/llama-3.3-70b-instruct-fp8-fast. Verify details against the original sources.

Affected packages

This source has no supported package-version data for matching. You can read the advisory here, but this record alone cannot power a dependency check.

Affected products

Vendor version evidence. Product records are separate from automatic dependency matching.

timescale · VulnCheck

pgvectorscale

1 range
VulnCheck version evidence

Compare with this publisher’s ranges. This does not inspect your installation.

affected

0 → before 0.9.1

semver versions

unaffected

unknown

Other versions: unaffected

Original source description

Timescale pgvectorscale before 0.9.1 contains a type confusion vulnerability that allows low-privileged database users to corrupt memory by shadowing pgvector's vector type or operators. Attackers with CREATE privilege on the vectorscale schema can pre-create shadow objects, then build and query DiskANN indexes over crafted values to cause out-of-bounds reads and writes, disclosing memory, crashing the server, or escalating privileges.

Inside the record

Evidence available

Package identity · not supplied
Version evidence
Remediation guidance · not supplied
Weakness classification
Additional publishers · not supplied

Describes the evidence in this view, not whether the product is safe.

Original records

CVE-2026-116489

View the latest unmodified CVE JSON from the official source. It may be newer than this imported page.

cve.new JSON →

Underlying weaknesses

The source’s classification of what caused the vulnerability.

CWE-843 ↗

Access of Resource Using Incompatible Type ('Type Confusion')

VulnCheck

Related →
Contributing organizations · 1
VulnCheck

Assigning organization

2026-10-26

What changed

Follow changes
No substantive changes have been recorded here yet. History starts when cve.new observes a change after tracking is enabled; earlier edits are not reconstructed.

Large field values are marked as truncated previews. Original source snapshots remain retained.

References

10 sources
github.com/timescale/pgvectorscale/pull/280
issue-trackingVulnCheck
github.com/timescale/pgvectorscale/commit/1c7cb1cab919ac122f901f163a71f69a264a8f81
patchVulnCheck
github.com/timescale/pgvectorscale/commit/59d2f573dbd7a1446728ac547576d22f5b05cfaa
patchVulnCheck
github.com/timescale/pgvectorscale/commit/f42f8cf29c92111add863ccf3255b3bf23fb51cd
patchVulnCheck
github.com/timescale/pgvectorscale/blob/0.9.0/pgvectorscale/src/access_method/mod.rs
technical-descriptionVulnCheck
github.com/timescale/pgvectorscale/blob/0.9.0/pgvectorscale/src/access_method/pg_vector.rs
technical-descriptionVulnCheck
View 4 more references
github.com/timescale/pgvectorscale/blob/0.9.0/pgvectorscale/src/access_method/build.rs
technical-descriptionVulnCheck
github.com/timescale/pgvectorscale/releases/tag/0.9.1
release-notesVulnCheck
github.com/timescale/pgvectorscale
productVulnCheck
www.vulncheck.com/advisories/timescale-pgvectorscale-before-0.9.1-type-confusion-via-unqualified-diskann-operator-classes
third-party-advisoryVulnCheck