Pgvector · Pgvector · CVE-2026-3172
**Name of the Vulnerable Software and Affected Versions**
pgvector versions 0.6.0 through 0.8.1
**Description**
A buffer overflow exists in the parallel HNSW index build process within pgvector versions 0.6.0 through 0.8.1. This issue allows a database user to potentially leak sensitive data from other relations or cause the database server to crash. The HNSW index is a component used for efficient similarity search in vector databases. The buffer overflow occurs during the index construction.
**Recommendations**
Update to a version of pgvector later than 0.8.1.