PostGREShell CVE-2026-6471: When Replication Privilege Becomes Server Code Execution
CVE-2026-6471 lets a PostgreSQL role with REPLICATION privilege load an arbitrary logical-decoding plugin. The official severity is high, the prerequisites matter, and supported releases are fixed.