Pgvector vulnerabilities
We track 2 vulnerabilities in Pgvector products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 29, 2026.
2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score
Latest Pgvector vulnerabilities
- 8.8 High severity
pgvector: Integer Overflow or Wraparound
Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit systems are affected.
- 8.1 High severity
pgvector: Integer Underflow (Wrap or Wraparound)
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server.