And here's postgres bidirectional RCE no admin required, client infects server, server infects client ♻️🐛

found using V12 by @rdjgr of the V12 security team V12 is our autonomous AI hacker. You can find bugs like this in your code: song: if your boyfriend was a songwriter by realina

Where's PoC? Technical details?

cant even get a fucking day off without having to patch and upgrade something

how much time did it take to find this? y'all have really been in the zone recently...

Are you able to say what versions of postgres this impacts yet?

this is a 26 year old vulnerablity

Yikes. Are you able to confirm if it needs a valid client auth to be abused or if simply being exposed to non-auth connection would be vuln?

Forgot the brainrot </3

There goes my weekend. Two wormable bidirectional database RCEs in one cycle, and HackerOne still has not triaged the first one after two weeks.

any details??? link to poc?

this shit is stuck in disclosure. Very sad

Can you turn down the fucking music next time

poc for postgres server RCE: CVE-2026-14669. patched postgreSQL 18.6.

pycrypto?

no admin is secondary if port 5432 is not reachable from untrusted clients