CVE-2026-70635 timescale CVE debrief

Who should care

Users of TimescaleDB, especially those with direct DML access to physical compressed hypertable relations, should verify and restrict access to prevent potential attacks. Additionally, security teams and vulnerability management teams should review the vulnerability's impact on their systems and implement necessary mitigations. Operators and platform administrators should also be aware of the vulnerability and take steps to protect their systems.

Technical summary

The vulnerability allows authenticated attackers to cause query-result integrity failures or backend crashes by supplying a crafted Simple8b selector-11 value, which is stored in the signed int16 Arrow dictionary-index type and bypasses index validation checks in bulk text dictionary decompression; verify input validation and index checks. This issue can be triggered through the VectorAgg single-text hashing strategy, resulting in incorrect aggregation output, backend SIGSEGV, or PostgreSQL crash recovery depending on build configuration.

Defensive priority

Authenticated attackers with direct DML access can cause query-result integrity failures or backend crashes; verify and restrict access to physical compressed hypertable relations.

Recommended defensive actions

• Verify and restrict access to physical compressed hypertable relations
• Validate and sanitize input to prevent crafted Simple8b selector-11 values
• Implement additional monitoring and logging to detect potential attacks
• Review and update TimescaleDB to the latest version
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The vulnerability allows authenticated attackers to cause query-result integrity failures or backend crashes by supplying a crafted Simple8b selector-11 value; verify input validation and index checks in bulk text dictionary decompression. Additional evidence and context are needed to fully understand the vulnerability's impact and to verify affected systems.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.