---
id: CVE-2026-97469
title: >-
  PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked
  users to repeatedly call the anon.hash() function and collects (seed,
  hash_output) pairs to perform an offline brute-force attack and deduce the
  salt
summary: >-
  PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked
  users to repeatedly call the anon.hash() function and collects (seed,
  hash_output) pairs to perform an offline brute-force attack and deduce the
  salt. A maske…
severity: medium
cvss: 4.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N'
cwe:
  - CWE-328
vendor: DALIBO
product: PostgreSQL Anonymizer
affected:
  - postgresql_anonymizer >= 1 < 3.2.3
published: '2026-09-25'
updated: '2026-09-25'
sourceUpdated: '2026-09-25T17:17:21.033'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-97469'
references:
  - url: 'https://gitlab.com/dalibo/postgresql_anonymizer/-/issues/685'
    label: f86ef6dc-4d3a-42ad-8f28-e6d5547a5007
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-09-25T16:06:34.584396Z'
ingestedAt: '2026-09-25T16:12:08.728Z'
---

## Overview

PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to repeatedly call the anon.hash() function and collects (seed, hash_output) pairs to perform an offline brute-force attack and deduce the salt. A masked role can run a RESTRICTED function when the call is placed inside the sub-select. The problem is resolved in PostgreSQL Anonymizer 3.2.3 and later versions

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.