CVE-2026-104947

Deferred Deferred - Pending Action

Missing Authorization in WarehousePG 7.2.1 to 7.6.0

Publication date: 2026-10-21

Last updated on: 2026-10-30

Assigner: EnterpriseDB Corporation

Description

WarehousePG (WHPG) 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability (CWE-862) in the built-in function gp_log_backend_memory_contexts(). Any authenticated database role can run this function without a GRANT. It also gets around the superuser restriction that PostgreSQL places on the underlying pg_log_backend_memory_contexts() function. A low-privileged user can force the segment backends of any other session, superuser sessions included, to write their memory context details to the segment server logs, which the attacker cannot read. Those details can include query text from other users' cached plans, and the call can be repeated to generate large amounts of log output. WarehousePG 6.x is not affected.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-21

Last Modified

2026-10-30

Generated

2026-11-10

AI Q&A

2026-10-21

EPSS Evaluated

2026-11-09

NVD

CVE-2026-104947

EUVD

EUVD-2026-107262

Affected Vendors & Products

Vendor	Product	Version / Range
EnterpriseDB	WarehousePG	7.2.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

This is a missing authorization vulnerability in WarehousePG versions 7.2.1 through 7.6.0. The function gp_log_backend_memory_contexts() can be executed by any authenticated database role without proper authorization, bypassing PostgreSQL's superuser restrictions. A low-privileged user can force segment backends to log memory context details, including sensitive query text from other users' cached plans.

Detection Guidance

To detect this vulnerability, check if the function gp_log_backend_memory_contexts() is accessible to unauthorized users. Run the following SQL command as a superuser: SELECT has_function_privilege('gp_log_backend_memory_contexts()', 'execute'); If it returns true for the public role, the vulnerability exists.

Impact Analysis

An attacker with low privileges could exploit this to generate excessive log output and potentially expose sensitive query details from other users' sessions. While the attacker cannot read the logs directly, the forced logging may reveal cached query plans containing sensitive data.

Compliance Impact

This vulnerability could lead to unauthorized exposure of sensitive data in logs, potentially violating GDPR's data protection principles or HIPAA's confidentiality requirements. The risk depends on whether the exposed query details contain regulated data.

Mitigation Strategies

Immediately revoke execute permissions on the function from the public role in all databases using: REVOKE EXECUTE ON FUNCTION gp_log_backend_memory_contexts() FROM public; Then upgrade WarehousePG to version 7.6.1 or later to fully resolve the issue.

Hi! I’m here to help you understand CVE-2026-104947. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...