CVE-2026-104948

WarehousePG WHPG 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability CWE-862 in the built-in cluster expansion functions gpexpandlockcatalog and gpexpandbumpversion. Any authenticated database role can run them, and neither checks privileges. A...

CVE-2026-104949

WarehousePG WHPG 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability CWE-862 in gpaddcoordinatorstandby. The function is named gpaddmasterstandby in WHPG 6, and WHPG 7 keeps that name as an alias. Unlike the other segment add and remove functions, i...

CVE-2026-104947

WarehousePG WHPG 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability CWE-862 in the built-in function gplogbackendmemorycontexts. Any authenticated database role can run this function without a GRANT. It also gets around the superuser restriction that PostgreSQL places on the...

CVE-2026-104949

WarehousePG WHPG 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability CWE-862 in gpaddcoordinatorstandby. The function is named gpaddmasterstandby in WHPG 6, and WHPG 7 keeps that name as an alias. Unlike the other segment add and remove functions, i...

CVE-2026-104949

WarehousePG (WHPG) versions 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are impacted by a missing authorization vulnerability (CWE-862) in the gp_add_coordinator_standby() function (aliased as gp_add_master_standby() in WHPG 6). The root cause is that this specific function does not require sup...

EUVD-2026-107264

WarehousePG WHPG 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability CWE-862 in gpaddcoordinatorstandby. The function is named gpaddmasterstandby in WHPG 6, and WHPG 7 keeps that name as an alias. Unlike the other segment add and remove functions, i...

CVE-2026-104948

WarehousePG WHPG 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability CWE-862 in the built-in cluster expansion functions gpexpandlockcatalog and gpexpandbumpversion. Any authenticated database role can run them, and neither checks privileges. A...

CVE-2026-104948

WarehousePG (WHPG) versions 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in the built-in cluster expansion functions gp_expand_lock_catalog() and gp_expand_bump_version(). Because these functions do not check privileges, any authent...

EUVD-2026-107263

WarehousePG WHPG 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability CWE-862 in the built-in cluster expansion functions gpexpandlockcatalog and gpexpandbumpversion. Any authenticated database role can run them, and neither checks privileges. A...

CVE-2026-104947

WarehousePG (WHPG) versions 7.2.1 through 7.6.0 are vulnerable to a missing authorization vulnerability (CWE-862 ) in the built-in function gp_log_backend_memory_contexts(). Any authenticated database role can execute this function without a GRANT , bypassing the superuser restrictions imposed by...

CVE-2026-104947

WarehousePG WHPG 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability CWE-862 in the built-in function gplogbackendmemorycontexts. Any authenticated database role can run this function without a GRANT. It also gets around the superuser restriction that PostgreSQL places on the...

EUVD-2026-107262

WarehousePG WHPG 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability CWE-862 in the built-in function gplogbackendmemorycontexts. Any authenticated database role can run this function without a GRANT. It also gets around the superuser restriction that PostgreSQL places on the...

PT-2026-120608

WarehousePG WHPG 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability CWE-862 in the built-in function gp log backend memory contexts. Any authenticated database role can run this function without a GRANT. It also gets around the superuser restriction that PostgreSQL places on...

PT-2026-120609

WarehousePG WHPG 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability CWE-862 in the built-in cluster expansion functions gp expand lock catalog and gp expand bump version. Any authenticated database role can run them, and neither checks privileges. ...

PT-2026-120610

WarehousePG WHPG 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability CWE-862 in gp add coordinator standby. The function is named gp add master standby in WHPG 6, and WHPG 7 keeps that name as an alias. Unlike the other segment add and remove...

CVE-2026-96538

WarehousePG WHPG 7.x before 7.6.0-WHPG is affected by a missing authorization vulnerability CWE-862 in the built-in server-side file functions pgfilewritetext,text,bool, pgfilerenametext,text,text, pgfileunlinktext, and pglogdirls. These functions are executable by any authenticated database role...

CVE-2026-96538

WarehousePG WHPG 7.x before 7.6.0-WHPG is affected by a missing authorization vulnerability CWE-862 in the built-in server-side file functions pgfilewritetext,text,bool, pgfilerenametext,text,text, pgfileunlinktext, and pglogdirls. These functions are executable by any authenticated database role...

CVE-2026-96538

WarehousePG (WHPG) 7.x before 7.6.0-WHPG is vulnerable to a privilege escalation (CWE-862) due to missing authorization on several built-in server-side file functions: pg_file_write, pg_file_rename, pg_file_unlink, and pg_logdir_ls. These functions are accessible by any authenticated database rol...

CVE-2026-96538 WarehousePG pg_file_write/pg_file_rename/pg_file_unlink/pg_logdir_ls privilege escalation

WarehousePG WHPG 7.x before 7.6.0-WHPG is affected by a missing authorization vulnerability CWE-862 in the built-in server-side file functions pgfilewritetext,text,bool, pgfilerenametext,text,text, pgfileunlinktext, and pglogdirls. These functions are executable by any authenticated database role...

CVE-2026-96538 WarehousePG pg_file_write/pg_file_rename/pg_file_unlink/pg_logdir_ls privilege escalation

WarehousePG WHPG 7.x before 7.6.0-WHPG is affected by a missing authorization vulnerability CWE-862 in the built-in server-side file functions pgfilewritetext,text,bool, pgfilerenametext,text,text, pgfileunlinktext, and pglogdirls. These functions are executable by any authenticated database role...