CVE-2026-29089

TimescaleDB is a time-series database for high-performance real-time analytics packaged as a Postgres extension. From version 2.23.0 to 2.25.1, PostgreSQL uses the search_path setting to locate unqualified database objects (tables, functions, operators). If the search_path includes user-writable schemas a malicious user can create functions in that schema that shadow builtin postgres functions and will be called instead of the postgres functions leading to arbitrary code execution during extension upgrade. This issue has been patched in version 2.25.2.

• CWE-426

• https://github.com/timescale/timescaledb/commit/9a8f7f8bdeb99e6abae0786ffe526791a8628ce3Patch
• https://github.com/timescale/timescaledb/pull/9331Issue Tracking, Patch
• https://github.com/timescale/timescaledb/releases/tag/2.25.2Product, Release Notes
• https://github.com/timescale/timescaledb/security/advisories/GHSA-vgp2-jj5c-828mMitigation, Vendor Advisory

Published

Mar 6, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-29081Frappe is a full-stack web application framework. Prior to v…8.8
• CVE-2026-29082Kestra is an event-driven orchestration platform. In version…5.4
• CVE-2026-29084Gokapi is a self-hosted file sharing server with automatic e…4.6
• CVE-2026-29085Hono is a Web application framework that provides support fo…6.5
• CVE-2026-29086Hono is a Web application framework that provides support fo…5.4
• CVE-2026-29087@hono/node-server allows running the Hono application on Nod…7.5
• CVE-2026-2909A vulnerability was detected in Tenda HG9 300001138. This af…8.8
• CVE-2026-29090### Summary A SQL injection vulnerability exists in Rucio v…8.8
• CVE-2026-29091Locutus brings stdlibs of other programming languages to Jav…8.1
• CVE-2026-29092Kiteworks is a private data network (PDN). Prior to version …7.5
• CVE-2026-29093WWBN AVideo is an open source video platform. Prior to versi…9.8
• CVE-2026-29096SuiteCRM is an open-source, enterprise-ready Customer Relati…6.5