Missing Authorization Vulnerability in WarehousePG Affected by Cluster Expansion Functions
CVE-2026-104948

7.1HIGH

Key Information:

Vendor

Enterprisedb

Status
Warehousepg
Vendor
CVE Published:
21 October 2026

What is CVE-2026-104948?

WarehousePG versions 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are susceptible to a missing authorization vulnerability that affects built-in cluster expansion functions. Specifically, the functions gp_expand_lock_catalog() and gp_expand_bump_version() can be executed by any authenticated database role without privilege checks. This flaw allows low-privileged users to interfere with catalog changes across the cluster, blocking DDL operations and impacting superuser capabilities. Additionally, repeated calls to gp_expand_bump_version() can forcibly disconnect sessions and cause errors for users with temporary tables, disrupting normal database operations.

Affected Version(s)

WarehousePG 6.27.1 < 6.27.7

WarehousePG 7.2.1 < 7.6.1

References

https://www.enterprisedb.com/docs/security/advisories/cve...

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.