A PostgreSQL account trusted to replicate data could cross into the operating system. The flaw survived for 12 years, but exploitation still requires the powerful REPLICATION privilege.