PostgreSQL Logical Decoding with Unauthorized Output Plugin (CVE-2026-6471)

Arnold Chan@slaz

•updated Sep 5, 2026•0•0•1

Detects the initialization of PostgreSQL logical replication slots using uncommon or unrecognized output plugins. Attackers may leverage logical replication plugins to exfiltrate data from a database by streaming changes as they occur, which can be an alternative to traditional mass-export techniques.