WarehousePG vulnerabilities

2 known vulnerabilities in WarehousePG from EnterpriseDB. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  WarehousePG: Missing Authorization

  CVE-2026-104948Oct 21, 2026EnterpriseDB

  WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in the built-in cluster expansion functions gp_expand_lock_catalog() and gp_expand_bump_version(). Any authenticated database role

• 8.7 High severity

  WarehousePG: Missing Authorization

  CVE-2026-96538Sep 28, 2026EnterpriseDB

  WarehousePG (WHPG) 7.x before 7.6.0-WHPG is affected by a missing authorization vulnerability (CWE-862) in the built-in server-side file functions pg_file_write(text,text,bool), pg_file_rename(text,text,text), pg_file_unlink(text), and pg_logdir_ls(). These fu