CVE-2019-9193: In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_...

Security readout for executives and security teams

This CVE describes PostgreSQL’s built-in COPY TO/FROM PROGRAM capability, which can run operating system commands as the database server user. The cited material also says PostgreSQL treats this as intended privileged behavior, not a product bug. Business urgency depends on whether powerful database roles are tightly controlled. Exposure is most likely where PostgreSQL 9.3 through 11.2 is used and untrusted, application, or over-broad administrative accounts hold superuser or pg_execute_server_program privileges. Prioritize a privilege review over emergency patching unless your environment grants powerful PostgreSQL roles broadly. The risk is serious when database administrators or compromised app accounts can reach OS-level execution through PostgreSQL. Mitigation focus: Review vendor and PostgreSQL guidance before treating this as a patchable flaw.; Remove superuser and pg_execute_server_program access from accounts that do not need it.; Use least-privilege database roles for applications and routine administration..

Prepared

Jun 6, 2026, 21:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.