CVE-2026-70635: timescaledb through 2.29.1 (inclusive), 0 through 2.29.1

Affected technology

timescaledb · through 2.29.1 (inclusive)
timescale

timescaledb · 0 through 2.29.1
timescale

Description’s affected range: through 2.29.1, fixed in commit 517c13e,

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

Authenticated attackers can cause query-result integrity failures or backend crashes by supplying a crafted Simple8b selector-11 value, which is stored in the signed int16 Arrow dictionary-index type and bypasses index validation checks in bulk text dictionary decompression. Vendor/CNA’s CVSS 4.0 assessment (base score 7.1/10) rates confidentiality impact as none; integrity impact as low; availability impact as high.