Untrusted data inclusion in PostgreSQL's pg_dump lets a database superuser embed arbitrary shell commands into a plain‑format dump. When that dump is restored with the psql client, the injected code expands through the \unrestrict meta‑command and runs under the operating‑system account that launched psql, granting the attacker remote code execution on the client machine.

Versions prior to PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are vulnerable. The flaw affects the core server, psql, pg_dump, pg_dumpall, and pg_restore when used to generate a plain‑format dump, and requires the origin server to have a superuser creating the dump.

The CVSS score of 8.8 signals high severity, while the EPSS score of less than 1% indicates a low probability of exploitation at this time. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires a superuser to craft a malicious dump and a victim to restore it with psql; the attack succeeds only during that restore operation. Administrators should act promptly to limit the attack surface.