The reported flaw is a use‑after‑free condition in the worker signaling logic of EnterpriseDB pglogical. The bug allows a worker instance to be dereferenced after its associated replication slot has been freed or recycled, which normally occurs during routine replication activity. When triggered, the condition can crash replication workers, leading to a denial‑of‑service of the parallel replication infrastructure. In a more severe scenario, the same use‑after‑free can be exploited in a PostgreSQL backend to execute arbitrary code with the privileges of that backend process. The vulnerability can be reached while performing normal replication tasks and can be triggered by a low‑privileged user who is permitted to start, stop, or restart workers. Because the flaw lies in the backend’s worker pool, an attacker can leverage it to crash the replication worker or, in the worst case, attain arbitrary code execution on the database host at the backend process privilege level.

EnterpriseDB pglogical is the affected product. No specific vendor‑determined version range has been supplied in the advisory, so any installation that incorporates the pglogical extension without the fix is potentially vulnerable.

The CVSS score of 7.7 reflects a high‑severity vulnerability with significant impact on availability and the potential for remote code execution. The EPSS score of less than 1% indicates that, while the exploit probability is low, the vulnerability is still noteworthy. The flaw can be reached while performing normal replication tasks and can be triggered by a low‑privileged user who is permitted to control worker start, stop, and restart operations. The vulnerability is not currently listed in the CISA KEV catalog, suggesting no publicized targeted exploitation as of the latest update.