IBM CockroachDB PostgreSQL for IBM VPC versions 25.2.0 through 25.2.20, 25.4.0 through 25.4.12, and 26.2.0 through 26.2.3 are vulnerable to privilege escalation by leveraging a user‑defined function. The flaw allows a database user with the ability to create or modify such functions to obtain higher‑level privileges, potentially accessing or altering data beyond their intended scope.

Products affected are IBM CockroachDB PostgreSQL for IBM VPC, spanning the three major releases cited above. Any deployment of these versions running on IBM VPC is at risk.

The CVSS score of 7.1 indicates a medium‑to‑high severity. EPSS is not available, but the vulnerability is not listed in the CISA KEV catalog. The likely attack vector involves a user who can define functions in the database; consequently, the exploitation requires some level of SQL access. If that privilege exists, an attacker can gain elevated rights and compromise data confidentiality, integrity, and availability.