EUVD-2026-123579

repmgr 4.0.0 through 5.5.0 is affected by an OS command injection vulnerability CWE-78 in event notifications. When eventnotificationcommand is configured, repmgr substitutes the %a node name, %c connection string and %d details placeholders into the command and runs it through the shell. %a and ...