CVE-2026-61821

A flaw was found in pgpartman. A user with partmanuser access can bypass authorization checks in the droppartitionid and droppartitiontime functions. This allows them to move retained child tables to schemas where they typically lack CREATE privileges. The relocation is performed with elevated...

DEBIAN-CVE-2026-61821

pgpartman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, droppartitionid and droppartitiontime use partconfig.retentionschema as the target for ALTER TABLE SET SCHEMA and accept any nonempty schema name. A role with partmanuser access can select a target...

CVE-2026-61821

pgpartman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, droppartitionid and droppartitiontime use partconfig.retentionschema as the target for ALTER TABLE SET SCHEMA and accept any nonempty schema name. A role with partmanuser access can select a target...