PostgreSQL fixes 12-year-old flaw enabling code execution through the REPLICATION role

PostgreSQL released updates to fix CVE-2026-6471. An account with the REPLICATION attribute could execute arbitrary code with the privileges of the operating-system user running the database server. Versions before 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.