First Published: 2026/10/30
Last Updated: 2026/10/30
Summary
WarehousePG (WHPG) 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability (CWE-862) in the built-in function gp_log_backend_memory_contexts(). Any authenticated database role can run this function without a GRANT. It also gets around the superuser restriction that PostgreSQL places on the underlying pg_log_backend_memory_contexts() function. A low-privileged user can force the segment backends of any other session, superuser sessions included, to write their memory context details to the segment server logs, which the attacker cannot read. Those details can include query text from other users' cached plans, and the call can be repeated to generate large amounts of log output. WarehousePG 6.x is not affected.
Vulnerability details
CVE-ID: CVE-2026-104947
CVSS Base Score: 5.3 Medium
CVSS Temporal Score: Undefined
CVSS Environmental Score: Undefined
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Affected products and versions
- Affected Product: WarehousePG
- Affected Versions: WarehousePG 7.2.1 through 7.6.0
- Not Affected: WarehousePG 6.x
Remediation/fixes
Impacted users must upgrade to a fixed version of WarehousePG.
| Product | VRMF | Remediation/First Fix |
|---|---|---|
| WarehousePG | 7.2.1 through 7.6.0 | Update to WarehousePG 7.6.1 or later |
Immediate mitigation for existing clusters
Until you can upgrade, apply the following as a superuser in every connectable database (all user databases, postgres, and template1, so that new databases inherit the change):
REVOKE EXECUTE ON FUNCTION gp_log_backend_memory_contexts(int8) FROM public; REVOKE EXECUTE ON FUNCTION gp_log_backend_memory_contexts(int8, int8) FROM public;
This is a stopgap, not a replacement for upgrading: it must be applied in every database and does not protect databases created afterward unless it was also run against template1.
References
Related information
Acknowledgement
Source: Reported by kta1kri through the EDB Vulnerability Disclosure Program.
Change history
- 2026/10/30: Original Copy Published
Disclaimer
This document is provided on an "as is" basis and does not imply any kind of guarantee or warranty, including the warranties of merchantability or fitness for a particular use. Your use of the information on the document is at your own risk. EDB reserves the right to change or update this document at any time. Customers are therefore recommended to always view the latest version of this document.