EUVD-2026-107263

WarehousePG WHPG 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability CWE-862 in the built-in cluster expansion functions gpexpandlockcatalog and gpexpandbumpversion. Any authenticated database role can run them, and neither checks privileges. A...

CVE-2026-104948

WarehousePG (WHPG) versions 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in the built-in cluster expansion functions gp_expand_lock_catalog() and gp_expand_bump_version(). Because these functions do not check privileges, any authent...