CVE-2026-96538 WarehousePG pg_file_write/pg_file_rename/pg_file_unlink/pg_logdir_ls privilege escalation

WarehousePG WHPG 7.x before 7.6.0-WHPG is affected by a missing authorization vulnerability CWE-862 in the built-in server-side file functions pgfilewritetext,text,bool, pgfilerenametext,text,text, pgfileunlinktext, and pglogdirls. These functions are executable by any authenticated database role...

CVE-2026-96538

WarehousePG (WHPG) 7.x before 7.6.0-WHPG is vulnerable to a privilege escalation (CWE-862) due to missing authorization on several built-in server-side file functions: pg_file_write, pg_file_rename, pg_file_unlink, and pg_logdir_ls. These functions are accessible by any authenticated database rol...